Trudesk CVE-2022-1808

HIGH

Execution with Unnecessary Privileges (CWE-250)

2022-05-31 security@huntr.dev

Privilege Escalation Trudesk

8.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

May 31, 2022 - 22:15 nvd

HIGH 8.8

DescriptionNVD

Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3.

AnalysisAI

Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-250. Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. Affected products include: Trudesk Project Trudesk. Version information: prior to 1.2.3..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Trudesk

View all

CVE-2022-2128 CRITICAL Act Now POC

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.4. Rated critical seve

CVE-2022-2023 CRITICAL Act Now POC

Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4. Rated critical severity (CVSS 9.8)

CVE-2022-1775 CRITICAL Act Now POC

Weak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2. Rated critical severity (CVSS 9.8), this

CVE-2022-1770 HIGH This Week POC

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2. Rated high severity (CVSS 8.8), this

CVE-2022-1931 HIGH This Week POC

Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. Rated high severity (CVSS 8.1), this vuln

CVE-2022-1752 HIGH This Week POC

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2. Rated high severity

CVE-2022-1718 HIGH This Week POC

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can a

CVE-2022-1803 MEDIUM This Month POC

Improper Restriction of Rendered UI Layers or Frames in GitHub repository polonel/trudesk prior to 1.2.2. Rated medium s

CVE-2022-1947 MEDIUM This Month POC

Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. Rated medium severity (CVSS 6.5), this vu

CVE-2022-1754 MEDIUM This Month POC

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. Rated medium severity (CVSS 6.5), th

CVE-2022-1728 MEDIUM This Month POC

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2

CVE-2022-1044 MEDIUM This Month POC

Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. R

Same weakness CWE-250 – Execution with Unnecessary Privileges

View all

CVE-2023-52030 CRITICAL POC

CVE-2025-57119 CRITICAL POC

CVE-2024-25421 CRITICAL POC

CVE-2023-46360 HIGH POC

CVE-2024-6913 CRITICAL POC

CVE-2022-0071 HIGH POC

CVE-2022-0070 HIGH POC

CVE-2026-1680 HIGH POC

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

Share

CVE-2022-1808 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy