Skip to content

bypazs/CVE-2023-26982

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 

CVE-2023-26982

Vulnerability Explanation:

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function.

Attack Vectors:

The attacker must create some ticket and then edit tags in the ticket and insert the XSS payload at the Add Tags input, Create Tag in order to exploit the stored XSS. The XSS payload will be launched immediately after save.

Affected:

  • http://[ip]:8118/tickets/[ID]

  • POST

    • /api/v1/tags/create
      • Parameter : tag

Payload :

  • <iframe src="javascript:alert('Hello XSS by BYPAZS!')">

Tested on:

  1. Trudesk version 1.2.6 (https://github.com/polonel/trudesk/releases/tag/v1.2.6)

  2. Google Chrome Version 109.0.5414.119 (Official Build) (x86_64)

Steps to attack:

  1. Enter your username and password; the account must have some privileges such as user, support and admin privileges.
  2. Create a Tickets, enter information into the form provided and then click at create.
  3. Select the tickets that created and then click at edit tags.
  4. Enter the XSS payload in the Add Tags and Create Tag field.
  5. The XSS payload will run immediately.

Discoverer:

:shipit: Thapanarath Khempetch

Disclosure Timeline:

  • 2023–02–15: Vulnerability discovered.
  • 2023–02–15: Vulnerability reported to the MITRE corporation.
  • 2023–03–29: CVE has been reserved.
  • 2023–03–29: Public disclosure of the vulnerability.

Reference:

  1. https://github.com/polonel/trudesk/releases/tag/v1.2.6

  2. https://trudesk.io/

About

Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticket function.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published