CVE-2022-1808— Execution with Unnecessary Privileges in polonel/trudesk
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-1808
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Execution with Unnecessary Privileges in polonel/trudesk
Source: NVD (National Vulnerability Database)
Vulnerability Description
Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
带着不必要的权限执行
Source: NVD (National Vulnerability Database)
Vulnerability Title
Chris Brame Trudesk 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Chris Brame Trudesk是美国Chris Brame公司的一个开源帮助台/票务解决方案。 Chris Brame Trudesk 1.2.3之前版本存在安全漏洞，该漏洞源于应用执行权限不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| polonel | polonel/trudesk | unspecified ~ 1.2.3 | - |
II. Public POCs for CVE-2022-1808
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-1808
请登录查看更多情报信息。
- https://huntr.dev/bounties/9-polonel/trudeskx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2022-1808
Same Patch Batch · polonel · 2022-05-31 · 5 CVEs total
| CVE-2022-1893 | 4.6 MEDIUM | Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk |
| CVE-2022-1926 | Integer Overflow or Wraparound in polonel/trudesk | |
| CVE-2022-1931 | Incorrect Synchronization in polonel/trudesk | |
| CVE-2022-1947 | Use of Incorrect Operator in polonel/trudesk |
IV. Related Vulnerabilities
Same product: polonel/trudesk
- CVE-2022-2128
Unrestricted Upload of File with Dangerous Type in polonel/t - CVE-2022-2023
Incorrect Use of Privileged APIs in polonel/trudesk - CVE-2022-1947
Use of Incorrect Operator in polonel/trudesk - CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or - CVE-2022-1926
Integer Overflow or Wraparound in polonel/trudesk
Same vendor: polonel
- CVE-2022-2128
Unrestricted Upload of File with Dangerous Type in polonel/t - CVE-2022-2023
Incorrect Use of Privileged APIs in polonel/trudesk - CVE-2022-1947
Use of Incorrect Operator in polonel/trudesk - CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or - CVE-2022-1926
Integer Overflow or Wraparound in polonel/trudesk
Same weakness: CWE-250
- CVE-2026-42088
OpenC3 COSMOS: Administrative Actions via the Script Runner - CVE-2026-40550
Privilege Escalation in mpGabinet - CVE-2026-25908
Dell Alienware Command Center 安全漏洞 - CVE-2026-4667
HP System Optimizer - Escalation of Privilege - CVE-2026-33793
Junos OS and Junos OS Evolved: When an unsigned Python op sc
V. Comments for CVE-2022-1808
No comments yet