Reflected XSS on ticket filter function in polonel/trudesk
CVE-2022-1719

5.5MEDIUM

Key Information:

Vendor

Polonel

Status
Polonel/trudesk
Vendor
CVE Published:
29 September 2022

What is CVE-2022-1719?

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page

Affected Version(s)

polonel/trudesk < 1.2.2

References

https://huntr.dev/bounties/790ba3fd-41e9-4393-8e2f-71161b...
x_refsource_CONFIRM
https://github.com/polonel/trudesk/commit/36a542abbbb7482...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.