PT-2024-11051 · Unknown · Trudesk Help Desk/Ticketing Solution

Published 2024-06-24 · Updated 2024-07-03 · CVE-2021-45785

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TruDesk Help Desk/Ticketing Solution version 1.1.11

Description The issue allows an attacker to perform a Cross-Site Request Forgery (CSRF) attack, enabling them to restart the server and cause a Denial of Service (DoS) attack. To exploit this, the attacker must create a webpage that sends a GET request to the "/api/v1/admin/restart" endpoint. The victim, who must have sufficient privileges, would then visit this webpage, triggering the server restart. The attacker needs to know the full URL of the TruDesk instance to craft the malicious webpage.

Recommendations For TruDesk Help Desk/Ticketing Solution version 1.1.11, as a temporary workaround, consider restricting access to the "/api/v1/admin/restart" endpoint until a patch is available. Additionally, limiting the ability for users to perform server restarts based on their privileges can help minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-45785

Affected Products

Trudesk Help Desk/Ticketing Solution

References · 4

• 🔥 https://1d8.github.io/cves/cve_2021_45785 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-45785 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45785 · Vendor Advisory
• https://t.me/cvenotify/84513 · Telegram Post