What is CVE-2021-45785?

CVE-2021-45785 is a medium-severity vulnerability in Trudesk Project, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2024-06-24.

How severe is CVE-2021-45785?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2021-45785 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Trudesk Project

CVE-2021-45785

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart endpoint, then the victim (who has sufficient privileges), would visit the page and the server restart would begin. The attacker must know the full URL that TruDesk is on in order to craft the webpage.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Trudesk_project Trudesk — versions 1.1.11
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2021-45785?: CVE-2021-45785 is a medium-severity vulnerability in Trudesk Project, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2024-06-24.
How severe is CVE-2021-45785?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2021-45785 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.