CVE-2022-1718CWE-190

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk

High · published May 16, 2022

CVSS v3.0
7.2
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-05-16T14:32Z
EPSS history
Timeline
  • 16 MAY 14:32Z
    The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk
    cvelistv5