Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xww3-w346-xq3w

Опубликовано: 03 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.

EPSS

Процентиль: 34%
0.00134
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
больше 2 лет назад

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.

CVSS3: 4.3
debian
больше 2 лет назад

Insufficient privilege verification in Zammad v5.3.0 allows an authent ...

EPSS

Процентиль: 34%
0.00134
Низкий

4.3 Medium

CVSS3