File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Unrestricted Upload of File with Dangerous Type in polonel/trudeskCVE-2022-2128polonel · CVSS 9.6 · 2.9% likely

   CWE-434

2. Unrestricted Upload of File with Dangerous Type in polonel/trudeskCVE-2022-1752polonel · CVSS 9 · 1.9% likely

   CWE-434

3. Stored XSS viva .svg file upload in polonel/trudeskCVE-2022-1045polonel · CVSS 9 · 1.6% likely

   CWE-434

4. Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APICVE-2026-114399polonel · CVSS 6.5 · 0.6% likely

   CWE-22

5. Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadsCVE-2026-114400polonel · CVSS 5.9 · 0.5% likely

   CWE-552

6. Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image UploadCVE-2026-114402polonel · CVSS 4.3 · 0.4% likely

   CWE-22

7. Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogoCVE-2026-114398polonel · CVSS 5.4 · 0.3% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.