Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9879-4r59-96j2

Опубликовано: 05 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.

EPSS

Процентиль: 37%
0.00157
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288
CWE-306

Связанные уязвимости

CVSS3: 4.3
nvd
10 месяцев назад

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.

CVSS3: 4.3
debian
10 месяцев назад

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge ba ...

EPSS

Процентиль: 37%
0.00157
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-288
CWE-306