agentprime: polonel-trudeskEvery new CVE for polonel-trudesk.https://agentprime.io/CVE-2026-114402: Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Uploadhttps://agentprime.io/advisories/CVE-2026-114402/https://agentprime.io/advisories/CVE-2026-114402/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:54 GMTCVECVE-2026-114401: Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginhttps://agentprime.io/advisories/CVE-2026-114401/https://agentprime.io/advisories/CVE-2026-114401/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:54 GMTCVECVE-2026-114400: Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadshttps://agentprime.io/advisories/CVE-2026-114400/https://agentprime.io/advisories/CVE-2026-114400/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:53 GMTCVECVE-2026-114399: Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APIhttps://agentprime.io/advisories/CVE-2026-114399/https://agentprime.io/advisories/CVE-2026-114399/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:52 GMTCVECVE-2026-114398: Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogohttps://agentprime.io/advisories/CVE-2026-114398/https://agentprime.io/advisories/CVE-2026-114398/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:52 GMTCVECVE-2026-114397: Trudesk through 1.2.11 Missing Authentication on Debug Routeshttps://agentprime.io/advisories/CVE-2026-114397/https://agentprime.io/advisories/CVE-2026-114397/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:51 GMTCVECVE-2026-114396: Trudesk through 1.2.11 MongoDB $where Injection via tickets search APIhttps://agentprime.io/advisories/CVE-2026-114396/https://agentprime.io/advisories/CVE-2026-114396/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:50 GMTCVECVE-2026-114395: Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/sendhttps://agentprime.io/advisories/CVE-2026-114395/https://agentprime.io/advisories/CVE-2026-114395/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:50 GMTCVECVE-2026-114394: Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIshttps://agentprime.io/advisories/CVE-2026-114394/https://agentprime.io/advisories/CVE-2026-114394/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:49 GMTCVECVE-2026-114393: Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpointshttps://agentprime.io/advisories/CVE-2026-114393/https://agentprime.io/advisories/CVE-2026-114393/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:48 GMTCVECVE-2026-114392: Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uidhttps://agentprime.io/advisories/CVE-2026-114392/https://agentprime.io/advisories/CVE-2026-114392/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:48 GMTCVECVE-2026-111345: Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:idhttps://agentprime.io/advisories/CVE-2026-111345/https://agentprime.io/advisories/CVE-2026-111345/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 21:43:37 GMTCVECVE-2022-2128: Unrestricted Upload of File with Dangerous Type in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-2128/https://agentprime.io/advisories/CVE-2022-2128/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jun 2022 16:45:16 GMTCVEcriticalCVE-2022-2023: Incorrect Use of Privileged APIs in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-2023/https://agentprime.io/advisories/CVE-2022-2023/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jun 2022 04:00:19 GMTCVEcriticalCVE-2022-1947: Use of Incorrect Operator in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1947/https://agentprime.io/advisories/CVE-2022-1947/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 22:20:11 GMTCVEcriticalCVE-2022-1808: Execution with Unnecessary Privileges in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1808/https://agentprime.io/advisories/CVE-2022-1808/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 22:00:13 GMTCVECVE-2022-1893: Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1893/https://agentprime.io/advisories/CVE-2022-1893/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 21:50:10 GMTCVECVE-2022-1926: Integer Overflow or Wraparound in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1926/https://agentprime.io/advisories/CVE-2022-1926/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 08:30:12 GMTCVECVE-2022-1931: Incorrect Synchronization in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1931/https://agentprime.io/advisories/CVE-2022-1931/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 May 2022 01:25:11 GMTCVEcriticalCVE-2022-1752: Unrestricted Upload of File with Dangerous Type in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1752/https://agentprime.io/advisories/CVE-2022-1752/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 May 2022 02:50:09 GMTCVEcriticalCVE-2022-1775: Weak Password Requirements in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1775/https://agentprime.io/advisories/CVE-2022-1775/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 22:35:11 GMTCVECVE-2022-1803: Improper Restriction of Rendered UI Layers or Frames in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1803/https://agentprime.io/advisories/CVE-2022-1803/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 21:40:18 GMTCVECVE-2022-1770: Improper Privilege Management in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1770/https://agentprime.io/advisories/CVE-2022-1770/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 18:05:10 GMTCVEcriticalCVE-2022-1754: Integer Overflow or Wraparound in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1754/https://agentprime.io/advisories/CVE-2022-1754/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 May 2022 07:05:10 GMTCVECVE-2022-1728: Allowing long password leads to denial of service in polonel/trudesk in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1728/https://agentprime.io/advisories/CVE-2022-1728/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 May 2022 14:55:13 GMTCVECVE-2022-1718: The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in…https://agentprime.io/advisories/CVE-2022-1718/https://agentprime.io/advisories/CVE-2022-1718/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 May 2022 14:32:17 GMTCVECVE-2022-1719: Reflected XSS on ticket filter function in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1719/https://agentprime.io/advisories/CVE-2022-1719/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 May 2022 14:32:10 GMTCVECVE-2022-1044: Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1044/https://agentprime.io/advisories/CVE-2022-1044/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 May 2022 08:10:10 GMTCVECVE-2022-1045: Stored XSS viva .svg file upload in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1045/https://agentprime.io/advisories/CVE-2022-1045/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Apr 2022 06:15:20 GMTCVEcriticalCVE-2022-1290: Stored XSS in "Name", "Group Name" & "Title" in polonel/trudeskhttps://agentprime.io/advisories/CVE-2022-1290/https://agentprime.io/advisories/CVE-2022-1290/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Apr 2022 15:50:09 GMTCVEcritical