CVE-2022-48023 in Zammadinformazioni

Riassunto

di MITRE • 03/02/2023

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Prenotare

29/12/2022

Divulgazione

03/02/2023

Moderazione

accettato

CPE

pronto

EPSS

0.00449

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-48023
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-48023
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-48023/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!