Количество 3
Количество 3
CVE-2025-32357
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.
CVE-2025-32357
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge ba ...
GHSA-9879-4r59-96j2
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-32357 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for. | CVSS3: 4.3 | 0% Низкий | 10 месяцев назад | |
CVE-2025-32357 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge ba ... | CVSS3: 4.3 | 0% Низкий | 10 месяцев назад | |
GHSA-9879-4r59-96j2 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for. | CVSS3: 4.3 | 0% Низкий | 10 месяцев назад |
Уязвимостей на страницу