CVE-2022-1947— Use of Incorrect Operator in polonel/trudesk
Quick assessment
Affected
polonel polonel/trudesk
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Chris Brame Trudesk是美国Chris Brame公司的一个开源帮助台/票务解决方案。 Chris Brame Trudesk 1.2.3之前版本存在安全漏洞，该漏洞源于应用中使用了不正确的运算符。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-1947
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Use of Incorrect Operator in polonel/trudesk
Source: CVE Program / CVE List V5
Vulnerability Description
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用操作符不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Chris Brame Trudesk 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Chris Brame Trudesk是美国Chris Brame公司的一个开源帮助台/票务解决方案。 Chris Brame Trudesk 1.2.3之前版本存在安全漏洞，该漏洞源于应用中使用了不正确的运算符。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| polonel | polonel/trudesk | unspecified ~ 1.2.3 | - |
|
II. Public POCs for CVE-2022-1947
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-1947
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-1947 (1)
-
https://huntr.dev/bounties/cb4d0ab3-51ba-4a42-9e38-ac0e544266f1 x_refsource_CONFIRM
Same Patch Batch · polonel · 2022-05-31 · 5 CVEs total
| CVE-2022-1893 | 4.6 MEDIUM | Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk |
| CVE-2022-1808 | Execution with Unnecessary Privileges in polonel/trudesk | |
| CVE-2022-1926 | Integer Overflow or Wraparound in polonel/trudesk | |
| CVE-2022-1931 | Incorrect Synchronization in polonel/trudesk |
IV. Related Vulnerabilities
Same product: polonel/trudesk
-
CVE-2022-2128
Unrestricted Upload of File with Dangerous Type in polonel/t -
CVE-2022-2023
Incorrect Use of Privileged APIs in polonel/trudesk -
CVE-2022-1808
Execution with Unnecessary Privileges in polonel/trudesk -
CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or -
CVE-2022-1926
Integer Overflow or Wraparound in polonel/trudesk
Same vendor: polonel
-
CVE-2022-2128
Unrestricted Upload of File with Dangerous Type in polonel/t -
CVE-2022-2023
Incorrect Use of Privileged APIs in polonel/trudesk -
CVE-2022-1808
Execution with Unnecessary Privileges in polonel/trudesk -
CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or -
CVE-2022-1926
Integer Overflow or Wraparound in polonel/trudesk
Same weakness: CWE-480
-
CVE-2026-79643
Dell Secure Connect Gateway 处理逻辑错误漏洞 -
CVE-2026-44722
pyzipper: Encryption bypass for small files encrypted with p -
CVE-2026-15043
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have -
CVE-2026-48497
Envoy: Abnormal process termination in DNS UDP filter -
CVE-2026-4748
pf silently ignores certain rules
V. Comments for CVE-2022-1947
No comments yet