CVE-2022-48022

creationtimestamp| type| source ---|---|--- 2023-02-03 07:25:25+00:00| seen| https://t.me/cibsecurity/57435...

CVE-2022-48022

An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see...

CVE-2022-48022

CVE-2022-48022 describes an access control flaw in Zammad v5.3.0 where the component at /api/v1/mentions allows authenticated users with agent permissions to view information about tickets they should not be allowed to see. The issue is confirmed across multiple sources in the connected set (NVD,...

CVE-2022-48022

An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see...