PT-2023-12140 · Dzzoffice · Dzzoffice

Name of the Vulnerable Software and Affected Versions: dzzoffice version 2.02.1 SC UTF8 Description: The issue is related to incorrect access control in the component "/index.php?mod=system&op=orgtree" of dzzoffice, allowing unauthenticated attackers to browse departments and usernames...