Skip to contentTrudesk Project Trudesk vulnerabilities
- polonel trudeskTrudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image UploadCVE-2026-1144025.3 Medium
- polonel trudeskTrudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginCVE-2026-1144016.9 Medium
- polonel trudeskTrudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadsCVE-2026-1144008.2 High
- polonel trudeskTrudesk through 1.2.11 Path Traversal via Backup Delete and Restore APICVE-2026-1143997.0 High
- polonel trudeskTrudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogoCVE-2026-1143985.1 Medium
- polonel trudeskTrudesk through 1.2.11 Missing Authentication on Debug RoutesCVE-2026-1143978.3 High
- polonel trudeskTrudesk through 1.2.11 MongoDB $where Injection via tickets search APICVE-2026-1143967.1 High
- polonel trudeskTrudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendCVE-2026-1143955.3 Medium
- polonel trudeskTrudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIsCVE-2026-1143945.3 Medium
- polonel trudeskTrudesk through 1.2.11 Authorization Bypass via Ticket Update API EndpointsCVE-2026-1143935.3 Medium
- polonel trudeskTrudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidCVE-2026-1143926.9 Medium
- trudesk project trudeskTruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF)...CVE-2021-457856.5 Medium
- trudesk project trudeskTrudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...CVE-2023-26982Public exploit5.4 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreUnrestricted Upload of File with Dangerous Type in polonel/trudeskCVE-2022-21289.6 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreIncorrect Use of Privileged APIs in polonel/trudeskCVE-2022-202310.0 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreUse of Incorrect Operator in polonel/trudeskCVE-2022-19479.1 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreExecution with Unnecessary Privileges in polonel/trudeskCVE-2022-18088.8 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in polonel/trudeskCVE-2022-18934.6 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudeskCVE-2022-19267.6 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreIncorrect Synchronization in polonel/trudeskCVE-2022-19319.1 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreUnrestricted Upload of File with Dangerous Type in polonel/trudeskCVE-2022-17529.0 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreWeak Password Requirements in polonel/trudeskCVE-2022-17758.4 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreImproper Restriction of Rendered UI Layers or Frames in polonel/trudeskCVE-2022-18038.4 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreImproper Privilege Management in polonel/trudeskCVE-2022-17709.9 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudeskCVE-2022-17548.4 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreAllowing long password leads to denial of service in polonel/trudesk in polonel/trudeskCVE-2022-17287.6 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreThe trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in…CVE-2022-17187.2 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreReflected XSS on ticket filter function in polonel/trudeskCVE-2022-17195.5 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreSensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskCVE-2022-10448.2 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreStored XSS viva .svg file upload in polonel/trudeskCVE-2022-10459.0 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreStored XSS in "Name", "Group Name" & "Title" in polonel/trudeskCVE-2022-12909.0 Critical