Log in Start free

polonel

Products

ProductCVEsExploitedLatest
polonel/trudesk18–Jun 20, 2022
trudesk12–Oct 21, 2026

Exploited and recent CVEs

  • CVE-2026-114402 Medium 4.3 Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload 0.4%
  • CVE-2026-114401 Medium 5.3 Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login 0.4%
  • CVE-2026-114400 Medium 5.9 Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads 0.5%
  • CVE-2026-114399 Medium 6.5 Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API 0.6%
  • CVE-2026-114398 Medium 5.4 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo 0.3%
  • CVE-2026-114397 High 7.4 Trudesk through 1.2.11 Missing Authentication on Debug Routes 0.6%
  • CVE-2026-114396 High 7.1 Trudesk through 1.2.11 MongoDB $where Injection via tickets search API 0.5%
  • CVE-2026-114395 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send 0.3%
  • CVE-2026-114394 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs 0.3%
  • CVE-2026-114393 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints 0.3%
  • CVE-2026-114392 Medium 5.3 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid 0.4%
  • CVE-2026-111345 Medium 4.3 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id 0.3%
  • CVE-2022-2128 Critical 9.6 Unrestricted Upload of File with Dangerous Type in polonel/trudesk 2.9%
  • CVE-2022-2023 Critical 10.0 Incorrect Use of Privileged APIs in polonel/trudesk 3.2%
  • CVE-2022-1947 Critical 9.1 Use of Incorrect Operator in polonel/trudesk 1.3%
  • CVE-2022-1808 High 8.8 Execution with Unnecessary Privileges in polonel/trudesk 3.8%
  • CVE-2022-1893 Medium 4.6 Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk 0.8%
  • CVE-2022-1926 High 7.6 Integer Overflow or Wraparound in polonel/trudesk 1.0%
  • CVE-2022-1931 Critical 9.1 Incorrect Synchronization in polonel/trudesk 1.7%
  • CVE-2022-1752 Critical 9.0 Unrestricted Upload of File with Dangerous Type in polonel/trudesk 1.9%
  • CVE-2022-1775 High 8.4 Weak Password Requirements in polonel/trudesk 2.2%
  • CVE-2022-1803 High 8.4 Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk 1.6%
  • CVE-2022-1770 Critical 9.9 Improper Privilege Management in polonel/trudesk 2.6%
  • CVE-2022-1754 High 8.4 Integer Overflow or Wraparound in polonel/trudesk 1.0%
  • CVE-2022-1728 High 7.6 Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk 1.0%
  • CVE-2022-1718 High 7.2 The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk 1.1%
  • CVE-2022-1719 Medium 5.5 Reflected XSS on ticket filter function in polonel/trudesk 0.7%
  • CVE-2022-1044 High 8.2 Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk 0.9%
  • CVE-2022-1045 Critical 9.0 Stored XSS viva .svg file upload in polonel/trudesk 1.6%
  • CVE-2022-1290 Critical 9.0 Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk 1.7%