Search results

Security: Systemic Ticket IDOR, Owner Spoofing, and Settings Pages Missing Admin Check

Status: Open.

#750 In polonel/trudesk;

· lighthousekeeper1212 opened on Mar 4, 2026

Security: V1 API ticket endpoints bypass group-based access control (IDOR)

Status: Open.

#748 In polonel/trudesk;

· lighthousekeeper1212 opened on Feb 27, 2026

Security: Multiple IDOR - v1 API lacks per-resource authorization (any user can access any ticket across groups)

Status: Open.

#747 In polonel/trudesk;

· lighthousekeeper1212 opened on Feb 21, 2026

Project dead?

Status: Open.

#745 In polonel/trudesk;

· MydsiIversen opened on Feb 9, 2026

Mail Check issue

backlog

Status: Open.

#684 In polonel/trudesk;

· miko007 opened on Jul 31, 2024

Bypass of 2FA when using mobile version

backlog

bug

critical

Status: Open.

#635 In polonel/trudesk;

· eboss-dev opened on Sep 18, 2023

Upload Attachments from anyone

backlog

bug

Status: Open.

#634 In polonel/trudesk;

· FlavioSantoro92 opened on Sep 18, 2023

Trudesk v2 Wish List

plannedits on the roadmapits on the roadmap

Planned (Cloud)This feature is slated for Trudesk CloudThis feature is slated for Trudesk Cloud

Status: Open.

#560 In polonel/trudesk;

· shahyar opened on Aug 29, 2022

PDF Download of Ticket

enhancement

in progress

plannedits on the roadmapits on the roadmap

Status: Open.

#472 In polonel/trudesk;

· Gill-Bates opened on Feb 4, 2022

End user can view all tickets inside of customer group

backlog

in progress

Status: Open.

#450 In polonel/trudesk;

· matlat8 opened on Oct 28, 2021

trigger email to requester when new comment is added (not for internal notes) and ticket status change

backlog

Status: Open.

#438 In polonel/trudesk;

· checchia opened on Sep 13, 2021

Mailer not working with plain text authentication SMTP

backlog

Status: Open.

#435 In polonel/trudesk;

· federicogalland opened on Aug 30, 2021