Paper/Archive/CVE-2022-2023

CVE-2022-2023

polonel polonel/trudesk — Incorrect Use of Privileged APIs in polonel/trudesk

EPSS 3%CVSS 10.0

critical.is priorityof 100

48

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 88.1.881 × 2017.6 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.

Affected

ProductAffectedFixed inSource

polonel/trudeskunspecified – < 1.2.41.2.4CNA

Scores by source

@huntrdev (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuntr.dev/bounties/0f35b1d3-56e6-49e4-bc5a-830f52e094b3 refgithub.com/polonel/trudesk/commit/83fd5a89319ba2c2f5934722e39b08aba9b3a4ac