CVE-2022-1931

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1931

The CVE-2022-1931 entry concerns polonel/trudesk with an incorrect synchronization issue in versions prior to 1.2.3. The core problem is a synchronization flaw in the code path, as stated in multiple sources. According to the NVD entry, the vulnerability has a CVSS-3.1 base score of 8.1 (HIGH) wi...

CVE-2022-1931 Incorrect Synchronization in polonel/trudesk

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1931 Incorrect Synchronization in polonel/trudesk

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3...

PT-2022-14174 · Unknown · Polonel/Trudesk

Name of the Vulnerable Software and Affected Versions: polonel/trudesk versions prior to 1.2.3 Description: The issue concerns the exposure of sensitive information to unauthorized actors due to improper removal of sensitive information before storage or transfer. This affects the GitHub reposito...

CVE-2022-1893: Improper Removal of Sensitive Information Before Storage or Transfer

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1808: Execution with Unnecessary Privileges

Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3...

CVE-2022-1752

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1752 Unrestricted Upload of File with Dangerous Type in polonel/trudesk

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1752

Polonel/trudesk CVE-2022-1752 is an Unrestricted File Upload vulnerability in versions prior to 1.2.2. Connected sources describe a path-traversal/unsafe upload path in the uploadImage workflow that can allow uploading dangerous files to arbitrary server locations. The CVE notes an unrestricted u...

CVE-2022-1775

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1775

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1775 Weak Password Requirements in polonel/trudesk

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1775

The CVE-2022-1775 entry concerns weak password requirements in polonel/trudesk before version 1.2.2. The vulnerability affects the authentication process, enabling weaker passwords and increasing the risk of account compromise. Public documents note the issue but do not detail exploit vectors or ...

CVE-2022-1775 Weak Password Requirements in polonel/trudesk

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1803

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1803

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...

Input validation

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2...

CVE-2022-1803

CVE-2022-1803 affects the GitHub repository polonel/trudesk prior to 1.2.2, where an improper restriction of rendered UI layers or frames enables UI redressing. The root cause is inadequate control of embedded UI layers/frames, potentially allowing aEB (UI-layer) to be framed by other content. Do...