CVE-2026-114400
HIGH
8,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
5,9
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Description
AI Translation Available
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express.static serves the public/ directory before the hasAuth-guarded /uploads mount, attackers who know or guess a ticket ObjectId and filename can retrieve confidential attachments.
552
Files or Directories Accessible to External Parties
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Potential Impacts:
Read Files Or Directories
Modify Files Or Directories
Applicable Platforms
Technologies:
Not Technology-Specific, Cloud Computing
https://hackmd.io/@leediay/multiple-vuln-trudesk-1211
https://github.com/polonel/trudesk
https://github.com/polonel/trudesk/blob/v1.2.11/src/middleware/index.js#L140
https://github.com/polonel/trudesk/blob/v1.2.11/src/middleware/index.js#L59-L65
https://hackmd.io/@leediay/multiple-vuln-trudesk-1211
https://www.vulncheck.com/advisories/trudesk-through-1.2.11-missing-authenticat…