Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk
CVE-2022-1044

8.2HIGH

Key Information:

Vendor

Polonel

Status
Polonel/trudesk
Vendor
CVE Published:
12 May 2022

What is CVE-2022-1044?

Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.

Affected Version(s)

polonel/trudesk < unspecified

References

https://huntr.dev/bounties/ff878be9-563a-4d0e-99c1-fc3c76...
x_refsource_CONFIRM
https://github.com/polonel/trudesk/commit/097b4823935c4fa...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

CVSS V3.0

Score:
8.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.