CVE-2020-29159

creationtimestamp| type| source ---|---|--- 2020-12-28 12:28:31+00:00| seen| https://t.me/cibsecurity/21339...

CVE-2020-29159

CVE-2020-29159 affects Zammad prior to 3.5.1. The vulnerability arises because the default signup Role assigned to newly created users can be a privileged Role if configured by an admin, which was unintended. Public references include Zammad advisories and a related commit; exploitation details, ...