CVE-2022-1728CWE-190

Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk

High · published May 16, 2022

CVSS v3.0
7.6
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-05-16T14:55Z
EPSS history
Timeline
  • 16 MAY 14:55Z
    Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk
    cvelistv5