polonel

8 results · Clear filters · Feed

• Critical 9.6
  CVE-2022-2128

  Unrestricted Upload of File with Dangerous Type in polonel/trudesk

  Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4.

  polonel polonel/trudesk
  Jun 20, 2022
• Critical 10.0
  CVE-2022-2023

  Incorrect Use of Privileged APIs in polonel/trudesk

  Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.

  polonel polonel/trudesk
  Jun 20, 2022
• Critical 9.1
  CVE-2022-1947

  Use of Incorrect Operator in polonel/trudesk

  Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.

  polonel polonel/trudesk
  May 31, 2022
• Critical 9.1
  CVE-2022-1931

  Incorrect Synchronization in polonel/trudesk

  Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.

  polonel polonel/trudesk
  May 31, 2022
• Critical 9.0
  CVE-2022-1752

  Unrestricted Upload of File with Dangerous Type in polonel/trudesk

  Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

  polonel polonel/trudesk
  May 21, 2022
• Critical 9.9
  CVE-2022-1770

  Improper Privilege Management in polonel/trudesk

  Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

  polonel polonel/trudesk
  May 20, 2022
• Critical 9.0
  CVE-2022-1045

  Stored XSS viva .svg file upload in polonel/trudesk

  Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.

  polonel polonel/trudesk
  Apr 11, 2022
• Critical 9.0
  CVE-2022-1290

  Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk

  Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.

  polonel polonel/trudesk
  Apr 10, 2022