CVE-2026-114402Medium· 4.3▾ SunlitTrudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authenticated users to overwrite other users' avatars via form-supplied _id and username fields. Attack…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authenticated users to overwrite other users' avatars via form-supplied _id and username fields. Attackers can supply a username like /../../../x to bypass the incomplete CVE-2022-1752 sanitization and write png, jpg, jpeg, or gif files outside public/uploads/users.
trudesk <= 1.2.11Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114399Medium· 6.5Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API
CVE-2026-114393Medium· 4.3Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints
CVE-2026-114392Medium· 4.3Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid
CVE-2026-114396High· 7.1Trudesk through 1.2.11 MongoDB $where Injection via tickets search API
CVE-2026-114394Medium· 4.3Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs
CVE-2026-114395Medium· 4.3Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send