Trudesk Project: >> Trudesk >> 0.1.7 Security Vulnerabilities
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-29
Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page
CVSS Score
5.5
EPSS Score
0.002
Published
2022-09-29
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4.
CVSS Score
9.6
EPSS Score
0.004
Published
2022-06-20
Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.
CVSS Score
10.0
EPSS Score
0.003
Published
2022-06-20
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
CVSS Score
9.1
EPSS Score
0.005
Published
2022-05-31
Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.
CVSS Score
8.8
EPSS Score
0.005
Published
2022-05-31
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3.
CVSS Score
4.6
EPSS Score
0.003
Published
2022-05-31
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.
CVSS Score
7.6
EPSS Score
0.004
Published
2022-05-31
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.
CVSS Score
9.1
EPSS Score
0.003
Published
2022-05-31
Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.
CVSS Score
9.0
EPSS Score
0.004
Published
2022-05-21
Page 1