CVE-2023-29867

2023-05-0216:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.8%

JSON

Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.

References

zammad.com/en/advisories/zaa-2023-02