Описание
An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.2.0 (включая) до 6.3.0 (исключая)
Одно из
cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*
cpe:2.3:a:zammad:zammad:6.3.0:alpha:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00779
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 6.5
debian
почти 2 года назад
An issue was discovered in Zammad before 6.3.0. An authenticated agent ...
CVSS3: 6.5
github
почти 2 года назад
An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.
EPSS
Процентиль: 73%
0.00779
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-862