Threat Investigation
Request a demo

CVE-2022-1718

High

Description

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service.

SeverityHigh
CVSS7.5
Exploit probability65. percentile1.1%
ProductTrudesk
PublishedSep 29, 2022
First seenSep 29, 2022
Weakness typeCWE-190Integer overflow

How to fix

Update
  • trudesk_project trudesk1.2.2 or later

Affected products

ProductAffected versionsFixed in
trudesk_project trudeskv < 1.2.21.2.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.