目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

polonel/trudesk 产品漏洞列表 / CVE 中文分析 18

polonel/trudesk 产品相关 18 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。

ベンダー: polonel

CVE IDタイトルCVSS深刻度公開日
CVE-2022-2128 Unrestricted Upload of File with Dangerous Type in polonel/trudesk CWE-434 8.0 -2022-06-20
CVE-2022-2023 Incorrect Use of Privileged APIs in polonel/trudesk CWE-648 8.8 -2022-06-20
CVE-2022-1947 Use of Incorrect Operator in polonel/trudesk CWE-480 6.5 -2022-05-31
CVE-2022-1808 Execution with Unnecessary Privileges in polonel/trudesk CWE-250 8.8 -2022-05-31
CVE-2022-1893 Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk CWE-212 4.6 Medium2022-05-31
CVE-2022-1926 Integer Overflow or Wraparound in polonel/trudesk CWE-190 7.5 -2022-05-31
CVE-2022-1931 Incorrect Synchronization in polonel/trudesk CWE-821 8.8 -2022-05-31
CVE-2022-1752 Unrestricted Upload of File with Dangerous Type in polonel/trudesk CWE-434 8.0 -2022-05-21
CVE-2022-1775 Weak Password Requirements in polonel/trudesk CWE-521 9.8 -2022-05-20
CVE-2022-1803 Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk CWE-1021 8.2 -2022-05-20
CVE-2022-1770 Improper Privilege Management in polonel/trudesk CWE-269 8.8 -2022-05-20
CVE-2022-1754 Integer Overflow or Wraparound in polonel/trudesk CWE-190 7.5 -2022-05-20
CVE-2022-1728 Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk CWE-190 6.5 -2022-05-16
CVE-2022-1718 The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk CWE-190 6.5 -2022-05-16
CVE-2022-1719 Reflected XSS on ticket filter function in polonel/trudesk CWE-79 5.4 -2022-05-16
CVE-2022-1044 Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk CWE-922 5.7 -2022-05-12
CVE-2022-1045 Stored XSS viva .svg file upload in polonel/trudesk CWE-434 5.4 -2022-04-11
CVE-2022-1290 Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk CWE-79 5.4 -2022-04-10

polonel/trudesk 产品累计公开 18 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。