Логотип exploitDog
bind:CVE-2024-33668
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-33668

Количество 3

Количество 3

nvd логотип

CVE-2024-33668

почти 2 года назад

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2024-33668

почти 2 года назад

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cach ...

CVSS3: 9.1
EPSS: Низкий
github логотип

GHSA-mxr8-qj6j-f7gq

почти 2 года назад

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-33668

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

CVSS3: 9.1
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-33668

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cach ...

CVSS3: 9.1
0%
Низкий
почти 2 года назад
github логотип
GHSA-mxr8-qj6j-f7gq

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

CVSS3: 9.1
0%
Низкий
почти 2 года назад

Уязвимостей на страницу