Polonel vulnerabilities

Products

• Polonel/trudesk 18
• Trudesk 12

Newest

• polonel trudesk Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload CVE-2026-114402 5.3 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login CVE-2026-114401 6.9 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads CVE-2026-114400 8.2 HighOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API CVE-2026-114399 7.0 HighOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo CVE-2026-114398 5.1 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Missing Authentication on Debug Routes CVE-2026-114397 8.3 HighOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 MongoDB $where Injection via tickets search API CVE-2026-114396 7.1 HighOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send CVE-2026-114395 5.3 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs CVE-2026-114394 5.3 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints CVE-2026-114393 5.3 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid CVE-2026-114392 6.9 MediumOctober 21, 2026
• polonel trudesk Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id CVE-2026-111345 5.3 MediumOctober 15, 2026
• polonel polonel/trudesk, trudesk project trudesk +1 more Unrestricted Upload of File with Dangerous Type in polonel/trudesk CVE-2022-2128 9.6 CriticalJune 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Incorrect Use of Privileged APIs in polonel/trudesk CVE-2022-2023 10.0 CriticalJune 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Use of Incorrect Operator in polonel/trudesk CVE-2022-1947 9.1 CriticalMay 31, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Execution with Unnecessary Privileges in polonel/trudesk CVE-2022-1808 8.8 HighMay 31, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk CVE-2022-1893 4.6 MediumMay 31, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Integer Overflow or Wraparound in polonel/trudesk CVE-2022-1926 7.6 HighMay 31, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Incorrect Synchronization in polonel/trudesk CVE-2022-1931 9.1 CriticalMay 31, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Unrestricted Upload of File with Dangerous Type in polonel/trudesk CVE-2022-1752 9.0 CriticalMay 21, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Weak Password Requirements in polonel/trudesk CVE-2022-1775 8.4 HighMay 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk CVE-2022-1803 8.4 HighMay 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Improper Privilege Management in polonel/trudesk CVE-2022-1770 9.9 CriticalMay 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Integer Overflow or Wraparound in polonel/trudesk CVE-2022-1754 8.4 HighMay 20, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk CVE-2022-1728 7.6 HighMay 16, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in… CVE-2022-1718 7.2 HighMay 16, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Reflected XSS on ticket filter function in polonel/trudesk CVE-2022-1719 5.5 MediumMay 16, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk CVE-2022-1044 8.2 HighMay 12, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Stored XSS viva .svg file upload in polonel/trudesk CVE-2022-1045 9.0 CriticalApril 11, 2022
• polonel polonel/trudesk, trudesk project trudesk +1 more Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk CVE-2022-1290 9.0 CriticalApril 10, 2022