Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5jc-27j7-j57c

Опубликовано: 09 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.

EPSS

Процентиль: 74%
0.00805
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.

CVSS3: 7.5
debian
больше 3 лет назад

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not cor ...

EPSS

Процентиль: 74%
0.00805
Низкий

7.5 High

CVSS3

Дефекты

CWE-863