PT-2023-31561 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad versions prior to 6.2.0 Description: An issue was discovered in Zammad where a user could see entries for which they lack permissions when listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket...

CVE-2021-35302

Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information...