178 matches found
Duplicate-of-CVE-2023-26982
Trudesk Version 1.2.6 Schwachstellenbeschreibung: Trudesk Version 1.2.6 wurde entdeckt, eine gespeicherte Cross-Site-Scripting XSS-Schwachstelle über die Tickets Create/Modify Ticket Tags in der Admin-Rolle zu enthalten. Angriffsvektoren: Der Angreifer muss zum Menü Einstellungen gehen, Tickets...
CVE-2023-26982
CVE-2023-26982 Spiegazione della vulnerabilità: È stato scoperto che Trudesk v1.2.6 contiene una vulnerabilità di cross-site scripting XSS memorizzato tramite il parametro Add Tags nella funzione Create Ticket. Vettori di attacco: L'attaccante deve creare un ticket e poi modificare i tag nel tick...
EUVD-2022-34414
Malicious code in bioql PyPI...
EUVD-2022-25035
Malicious code in bioql PyPI...
EUVD-2022-24392
Malicious code in bioql PyPI...
EUVD-2022-25000
Malicious code in bioql PyPI...
EUVD-2022-25200
Malicious code in bioql PyPI...
EUVD-2022-25033
Malicious code in bioql PyPI...
EUVD-2022-25198
Malicious code in bioql PyPI...
EUVD-2022-25001
Malicious code in bioql PyPI...
EUVD-2022-25087
Malicious code in bioql PyPI...
EUVD-2022-25051
Malicious code in bioql PyPI...
EUVD-2023-30772
Malicious code in bioql PyPI...
EUVD-2022-25009
Malicious code in bioql PyPI...
EUVD-2022-25082
Malicious code in bioql PyPI...
EUVD-2022-25056
Malicious code in bioql PyPI...
CVE-2023-26982
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function...
CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3...
CVE-2022-1719
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...
CVE-2021-45785
TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery CSRF attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart endpoint, then the vict...