TP
Vendor
Trudesk Project
24
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114401 | TR Trudesk Trudesk Project | 5.3 | Oct 21 | Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login |
| CVE-2026-114400 | TR Trudesk Trudesk Project | 7.5 | Oct 21 | Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads |
| CVE-2026-114399 | TR Trudesk Trudesk Project | 6.5 | Oct 21 | Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API |
| CVE-2026-114398 | TR Trudesk Trudesk Project | 5.4 | Oct 21 | Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo |
| CVE-2021-45785 | TR Trudesk Trudesk Project | 6.5 | Jun 24 | TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, causing a DoS attack |
| CVE-2023-26982 | TR Trudesk Trudesk Project | 5.4 | Mar 29 | Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function |
| CVE-2022-2128 | TR Trudesk Trudesk Project | 9.8 | Jun 20 | Unrestricted Upload of File with Dangerous Type in polonel/trudesk |
| CVE-2022-2023 | TR Trudesk Trudesk Project | 9.8 | Jun 20 | Incorrect Use of Privileged APIs in polonel/trudesk |
| CVE-2022-1947 | TR Trudesk Trudesk Project | 6.5 | May 31 | Use of Incorrect Operator in polonel/trudesk |
| CVE-2022-1808 | TR Trudesk Trudesk Project | 8.8 | May 31 | Execution with Unnecessary Privileges in polonel/trudesk |
| CVE-2022-1893 | TR Trudesk Trudesk Project | 5.3 | May 31 | Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk |
| CVE-2022-1926 | TR Trudesk Trudesk Project | 4.9 | May 31 | Integer Overflow or Wraparound in polonel/trudesk |
| CVE-2022-1931 | TR Trudesk Trudesk Project | 8.1 | May 31 | Incorrect Synchronization in polonel/trudesk |
| CVE-2022-1752 | TR Trudesk Trudesk Project | 8.0 | May 21 | Unrestricted Upload of File with Dangerous Type in polonel/trudesk |
| CVE-2022-1775 | TR Trudesk Trudesk Project | 9.8 | May 20 | Weak Password Requirements in polonel/trudesk |
| CVE-2022-1803 | TR Trudesk Trudesk Project | 6.9 | May 20 | Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk |
| CVE-2022-1770 | TR Trudesk Trudesk Project | 8.8 | May 20 | Improper Privilege Management in polonel/trudesk |
| CVE-2022-1754 | TR Trudesk Trudesk Project | 6.5 | May 20 | Integer Overflow or Wraparound in polonel/trudesk |
| CVE-2022-1728 | TR Trudesk Trudesk Project | 6.5 | May 16 | Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk |
| CVE-2022-1718 | TR Trudesk Trudesk Project | 7.5 | May 16 | The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk |
| CVE-2022-1719 | TR Trudesk Trudesk Project | 5.4 | May 16 | Reflected XSS on ticket filter function in polonel/trudesk |
| CVE-2022-1044 | TR Trudesk Trudesk Project | 6.5 | May 12 | Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk |
| CVE-2022-1045 | TR Trudesk Trudesk Project | 5.4 | Apr 11 | Stored XSS viva .svg file upload in polonel/trudesk |
| CVE-2022-1290 | TR Trudesk Trudesk Project | 5.4 | Apr 10 | Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk |