Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57wg-rgp4-66qm

Опубликовано: 02 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.

EPSS

Процентиль: 55%
0.00324
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 6.5
nvd
почти 3 года назад

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.

CVSS3: 6.5
debian
почти 3 года назад

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. ...

EPSS

Процентиль: 55%
0.00324
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-346