ranjit-git

are you able to access the report?

did you received the magick link to view report?

@ignacionelson i have identified the vulnerable endpoint for your easy https://huntr.dev/bounties/1625196531585-projectsend/projectsend/ --------------------------------------------------------------------- submitted a PR for fix the bug https://github.com/projectsend/projectsend/pull/971 https://huntr.dev/bounties/1625188746038-projectsend/projectsend/ --> --------------------------------------------------------------------------------------- vulnerable code at http://localhost/projectsend2/assets/js/app.js ``` var li...

@ignacionelson can you plz valided above all report ? i see fix deployment taking long time

yes i see only you maintaining this repo. Dont worry i will help you to fix those. For the second-one just created a patch for huntr . And for 3rd...

@ignacionelson Hello, i see it has been 6 month since bug reported and still many of them are not validated . As fix taking long time so you can validate...

@ignacionelson https://huntr.dev/bounties/1625240017884-projectsend/projectsend/ https://huntr.dev/bounties/1625229895180-projectsend/projectsend/ https://huntr.dev/bounties/1625229560780-projectsend/projectsend/ https://huntr.dev/bounties/1625229237062-projectsend/projectsend/ https://huntr.dev/bounties/1625228789050-projectsend/projectsend/ https://huntr.dev/bounties/1625228365696-projectsend/projectsend/ https://huntr.dev/bounties/1625228023793-projectsend/projectsend/ https://huntr.dev/bounties/1625227550260-projectsend/projectsend/ https://huntr.dev/bounties/1625198773635-projectsend/projectsend/ https://huntr.dev/bounties/1625197455990-projectsend/projectsend/ https://huntr.dev/bounties/1625195879034-projectsend/projectsend/ https://huntr.dev/bounties/1625188855252-projectsend/projectsend/ Thanks.

any update ? Few security report are still opened @ignacionelson

@polonel @josep11 few more security report is submitted https://huntr.dev/bounties/5-polonel/trudesk https://huntr.dev/bounties/6-polonel/trudesk https://huntr.dev/bounties/7-polonel/trudesk https://huntr.dev/bounties/8-polonel/trudesk https://huntr.dev/bounties/9-polonel/trudesk https://huntr.dev/bounties/10-polonel/trudesk https://huntr.dev/bounties/11-polonel/trudesk

Hi @polonel few reports are still pending. https://huntr.dev/bounties/5-polonel/trudesk/ https://huntr.dev/bounties/6-polonel/trudesk/ https://huntr.dev/bounties/7-polonel/trudesk/ https://huntr.dev/bounties/8-polonel/trudesk/ https://huntr.dev/bounties/9-polonel/trudesk/ Can you plz validate them in huntr?