Skip to content
OpenAdvisories

Product · polonel

polonel/trudesk

18 known vulnerabilities.

8 results · Clear filters · Feed

  • High 8.8

    Execution with Unnecessary Privileges in polonel/trudesk

    Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.

  • High 7.6

    Integer Overflow or Wraparound in polonel/trudesk

    Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.

  • High 8.4

    Weak Password Requirements in polonel/trudesk

    Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.

  • High 8.4

    Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk

    Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2.

  • High 8.4

    Integer Overflow or Wraparound in polonel/trudesk

    Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.

  • High 7.6

    Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk

    Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

  • High 7.2

    The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk

    The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can …

  • High 8.2

    Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk

    Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.