Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-33667 EUVD-2024-31380GHSA-fc5p-cp62-fgpc

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoi…

Published Apr 26, 2024 · Updated Nov 25, 2024 · Assigned by mitre

Description

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.

References