Skip to content
OpenAdvisories
High WID-SEC-2025-0684 4 CVEs

Zammad: Mehrere Schwachstellen

Published Apr 1, 2025 · Updated Apr 6, 2025 · Revision 2 · de-DE

Vendor: zammad Product: zammad Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Zammad ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

Zammad ist ein Helpdesk- und Ticketsystem.

Vulnerabilities 4

  • Medium 4.8
    CVE-2025-32359

    In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor …

    zammad zammad
  • Medium 4.3
    CVE-2025-32357

    In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to …

    zammad zammad
  • Medium 4.2
    CVE-2025-32360

    In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared artic…

    zammad zammad
  • Medium 4.0
    CVE-2025-32358

    In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated admin users can enable webhooks in Zammad, which are trigge…

    zammad zammad

Revision history

  1. #2

    CVE's ergänzt

  2. #1

    Initiale Fassung

References