CVE-2022-1770

CVE-2022-1770 describes an Improper Privilege Management vulnerability in the polonel/trudesk GitHub repository, affecting versions prior to 1.2.2. This flaw allows an authenticated, low-privileged attacker to achieve high impact on confidentiality, integrity, and availability. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity. While there is no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, the vulnerability has garnered significant community discussion with 10 mentions.