Description
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by submitting regex patterns to POST /api/v1/login. Attackers can send alternations or prefixes like (admin|root) or a.* and distinguish 'Invalid User' from 'Invalid Password' responses to discover valid accounts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
polonel trudesk
Default version status: unaffected
0 to ≤ 1.2.11affected
pkg:github/polonel/trudeskReferences
- https://hackmd.io/@leediay/multiple-vuln-trudesk-1211 ↗
- https://github.com/polonel/trudesk/blob/v1.2.11/src/models/user.js#L310-L319 ↗
- https://github.com/polonel/trudesk/blob/v1.2.11/src/controllers/api/v1/common.js#L45-L65 ↗
- https://github.com/polonel/trudesk ↗
- https://www.vulncheck.com/advisories/trudesk-through-1.2.11-username-enumeration-via-regex-injection-in-api-v1-login ↗