Duplicate-of-CVE-2023-26982

Trudesk バージョン 1.2.6 脆弱性の説明: Trudesk バージョン 1.2.6 には、管理者ロールのチケット Create/Modify Ticket Tags を介した保存型クロスサイトスクリプティング XSS の脆弱性が含まれていることが判明しました。 攻撃ベクトル: 攻撃者は Settings メニューに移動し、tickets を選択してから下にスクロールして Ticket Tags を見つけなければなりません。保存型 XSS を悪用するには、CREATE をクリックし、Add Tags 入力に XSS ペイロードを挿入して Create Tag を実行します。XS...

EUVD-2020-18665

Malware in sbrugna...

EUVD-2022-50737

Malicious code in bioql PyPI...

CVE-2022-48023

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags...

CVE-2022-48023

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags...

Design/Logic Flaw

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags...

CVE-2022-48023

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags...

PT-2023-15554 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad version 5.3.0 Description: Insufficient privilege verification allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. The issue has been corrected so that only agents with write...

PT-2022-25554 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad versions 5.2.1 Description: The issue concerns a fine-grained permission model in Zammad that allows configuration of read-only access to tickets. However, agents were still able to perform certain operations on these tickets, such as...

Zammad Cross-Site Scripting Vulnerability (CNVD-2020-75062)

Zammad is a Web-based open source helpdesk/customer support system. A stored cross-site scripting vulnerability exists in Zammad versions prior to 3.4.1. An attacker can exploit this vulnerability to execute malicious code via the Tags element in TIcket...

Zammad 跨站脚本漏洞

Zammad is a Web-based open source helpdesk/customer support system. A stored cross-site scripting vulnerability exists in Zammad versions prior to 3.4.1. An attacker can exploit this vulnerability to execute malicious code via the Tags element in TIcket...