Количество 3
Количество 3
CVE-2025-32357
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.
CVE-2025-32357
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge ba ...
GHSA-9879-4r59-96j2
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-32357 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-32357 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge ba ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
GHSA-9879-4r59-96j2 In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу