CVE-2023-50453

Summary: CVE-2023-50453 affects Zammad prior to version 6.2.0. The login screen uses the public endpoint /api/v1/signshow, which returns internal configuration data of user object attributes (e.g., selectable values) that should not be visible publicly. What’s affected: Zammad before 6.2.0; the v...