CVE-2020-26033

creationtimestamp| type| source ---|---|--- 2020-12-28 12:28:23+00:00| seen| https://t.me/cibsecurity/21331...

CVE-2020-26033

CVE-2020-26033 affects Zammad prior to version 3.4.1, where the Tag and Link REST API endpoints (add and delete) do not perform CSRF token validation. Connected sources corroborate a CSRF vulnerability in the labeling/linking REST paths, with broader references noting fixes in newer releases (e.g...