Zammad Security Vulnerability

Zammad is a suite of ticket management software from the German company Zammad. A security vulnerability exists in Zammad versions prior to 3.4.1, where an incorrect authorization check is performed on simulated requests via X-On-Behalf-Of. The authorization check is performed for the actual user...