Description
An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.
High · 8.6
CVE-2024-33666
EUVD-2024-31379GHSA-4rv2-fpjm-34hr
An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this …
Published Apr 26, 2024 · Updated Aug 2, 2024 · Assigned by mitre