Description
Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.
Medium · 6.5
CVE-2023-29867
EUVD-2023-33404GHSA-57wg-rgp4-66qm
Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked account…
Published May 2, 2023 · Updated Jan 30, 2025 · Assigned by mitre