polonel/trudesk
GitHub
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 5.4 MEDIUM | — | ||
Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function. | |||
| 7.5 HIGH | — | ||
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service. | |||
| 5.4 MEDIUM | — | ||
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4. | |||
| 6.5 MEDIUM | 4 MEDIUM | ||
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. | |||
| 4.6 MEDIUM | 5 MEDIUM | ||
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3. | |||
| 8.8 HIGH | 6.5 MEDIUM | ||
Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. | |||
| 4.9 MEDIUM | 4 MEDIUM | ||
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. | |||
| 8.1 HIGH | 5.5 MEDIUM | ||
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. | |||
| 8 HIGH | 6 MEDIUM | ||
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2. | |||
| 6.9 MEDIUM | 4.9 MEDIUM | ||
Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2. | |||
| 8.8 HIGH | 6.5 MEDIUM | ||
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2. | |||
| 6.5 MEDIUM | 4 MEDIUM | ||
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. | |||
| 6.5 MEDIUM | 4 MEDIUM | ||
Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications. | |||
| 6.5 MEDIUM | 4.3 MEDIUM | ||
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. | |||
| 5.4 MEDIUM | 3.5 LOW | ||
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0. | |||
| 5.4 MEDIUM | 3.5 LOW | ||
Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse. | |||