CVE-2022-35489

In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned...

CVE-2022-35489

CVE-2022-35489 affects Zammad 5.2.0 where users assigned to secondary organizations could view all organizations in the system instead of only their own. The vulnerability arises from insufficient access control for organization visibility, resulting in a High confidentiality impact (C:H) with no...