CVE-2020-29160

2020-12-2808:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.6%

An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.

CPENameOperatorVersion
zammadeq1.6.1
zammadeq1.6.0
zammadeq2.10.0
zammadeq3.7.0

Name	Operator	Version
zammad	eq	1.6.1
zammad	eq	1.6.0
zammad	eq	2.10.0
zammad	eq	3.7.0

References

github.com/zammad/zammad/commit/28944de180a88698509a656f61558bf9d7f810f4

zammad.com/en/advisories/zaa-2020-24