Threats tagged 'ghsa-7gvc-74f6-rqx4'

1 threat

Threats tagged 'ghsa-7gvc-74f6-rqx4'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-114395trudesk · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.3%2026-10-21CVE Database V5CVE-2026-114395 Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated users to post messages as other users due to an incomplete CVE-2022-1931 fix. Attackers can supply arbitrary owner and cId values to POST /api/v1/messages/send to inject spoofed messages into conversations they do not belong to. EPSS 0.3%Vulnerability polonel #ghsa-7gvc-74f6-rqx4	CVE Database V5	2026-10-21

Showing 1–1 of 1 result