CVE-2026-114398

概要

参考情報

• polonel/trudesk · Product
• polonel/trudesk · Product
• polonel/trudesk · Product
• hackmd.io/@leediay/multiple-vuln-trudesk-1211 · Exploit
• vulncheck.com/advisories/trudesk-through-1.2.11-unrestricted-file-upload-via-settings-general-uploadlogo · Third Party Advisory

trudesk のその他の脆弱性

• CVE-2026-114402中 4.3Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authen…
• CVE-2026-114401中 5.3Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by…
• CVE-2026-114400高 7.5Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket atta…
• CVE-2026-114399中 6.5Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded tra…
• CVE-2026-114397高 7.4Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthent…