CVE-2023-50456

An issue in Zammad prior to version 6.2.0 allows an attacker to trigger phishing links in generated notification emails by supplying crafted first or last names. Affected software is the Zammad ticketing system (pre-6.2.0). The underlying flaw is exploited via notification email content, enabling...