Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

trudesk — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in trudesk, with AI-generated Chinese analysis, references, and POCs.

Vendor: polonel

CVE ID Title CVSS Severity Published
CVE-2026-114402 Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload CWE-22 4.3 Medium 2026-10-21
CVE-2026-114400 Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads CWE-552 5.9 Medium 2026-10-21
CVE-2026-114401 Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login CWE-943 5.3 Medium 2026-10-21
CVE-2026-114399 Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API CWE-22 6.5 Medium 2026-10-21
CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo CWE-434 5.4 Medium 2026-10-21
CVE-2026-114397 Trudesk through 1.2.11 Missing Authentication on Debug Routes CWE-1188 7.4 High 2026-10-21
CVE-2026-114396 Trudesk through 1.2.11 MongoDB $where Injection via tickets search API CWE-943 7.1 High 2026-10-21
CVE-2026-114395 Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send CWE-639 4.3 Medium 2026-10-21
CVE-2026-114393 Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints CWE-639 4.3 Medium 2026-10-21
CVE-2026-114394 Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs CWE-639 4.3 Medium 2026-10-21
CVE-2026-114392 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid CWE-639 4.3 Medium 2026-10-21
CVE-2026-111345 Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id CWE-639 4.3 Medium 2026-10-15

All 12 known CVE vulnerabilities affecting trudesk with full Chinese analysis, references, and POCs where available.