PT-2022-14174 · Unknown · Polonel/Trudesk

Published 2022-05-31 · Updated 2023-08-02 · CVE-2022-1893

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions polonel/trudesk versions prior to 1.2.3

Description The issue concerns the exposure of sensitive information to unauthorized actors due to improper removal of sensitive information before storage or transfer. This affects the GitHub repository polonel/trudesk.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information stored or transferred by the repository until the update is applied.

Exploit

Fix

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2022-1893

Affected Products

Polonel/Trudesk

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1893.json · Exploit
• 🔥 https://huntr.dev/bounties/a1cfe61b-5248-4a73-9a80-0b764edc9b26 · Exploit
• https://github.com/polonel/trudesk/commit/ae904d37eaa38bffebfbfe8e949c0385c63e3263 · Patch
• https://osv.dev/vulnerability/CVE-2022-1893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1893 · Security Note
• https://t.me/cibsecurity/43589 · Telegram Post
• https://t.me/cvenotify/30945 · Telegram Post