CVE-2026-114400

Mô tả

Tham khảo

• polonel/trudesk · Issue Tracking
• hackmd.io/@leediay/multiple-vuln-trudesk-1211 · Exploit
• vulncheck.com/advisories/trudesk-through-1.2.11-missing-authentication-for-ticket-attachments-via-uploads · Third Party Advisory
• zineausa.com/blog/2026/10/trudesk-1-2-11-unauthorized-ticket-access-idor · Exploit

Lỗ hổng khác của trudesk

• CVE-2026-114402TRUNG BÌNH 4.3Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authen…
• CVE-2026-114401TRUNG BÌNH 5.3Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by…
• CVE-2026-114399TRUNG BÌNH 6.5Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded tra…
• CVE-2026-114398TRUNG BÌNH 5.4Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in t…
• CVE-2026-114397CAO 7.4Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthent…