Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/04/09 7:23 p.m.1 views

CVE-2026-34248

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations means they can see each other's tickets could see fields which are not intended for customers - including fields not intended for them at all e.g. priority, custom ticket attribut...

5.7CVSS5.9AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2026/04/08 7:25 p.m.1 views

CVE-2026-34248

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations means they can see each other's tickets could see fields which are not intended for customers - including fields not intended for them at all e.g. priority, custom ticket attribut...

5.7CVSS0.00035EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 6:0 p.m.1 views

EUVD-2026-20556

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations means they can see each other's tickets could see fields which are not intended for customers - including fields not intended for them at all e.g. priority, custom ticket attribut...

2.1CVSS5.9AI score0.00035EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 6:0 p.m.1 views

CVE-2026-34248 Zammad has an information disclosure in ticket detail view of customers in shared organizations

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations means they can see each other's tickets could see fields which are not intended for customers - including fields not intended for them at all e.g. priority, custom ticket attribut...

2.1CVSS5.9AI score0.00035EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 6:0 p.m.2 views

CVE-2026-34248

Zammad (web-based helpdesk) prior to 7.0.1 allowed customers in a shared organization to view fields not intended for customers (e.g., priority, internal ticket attributes) in the ticket detail view when opening a ticket from another user in the same shared org. The root cause is exposure of inte...

5.7CVSS5.9AI score0.00035EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/08 6:0 p.m.14 views

CVE-2026-34248 Zammad has an information disclosure in ticket detail view of customers in shared organizations

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations means they can see each other's tickets could see fields which are not intended for customers - including fields not intended for them at all e.g. priority, custom ticket attribut...

2.1CVSS0.00035EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.1 views

PT-2026-31413

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.1 Description Zammad is a web based open source helpdesk/customer support system. In shared organizations, customers could view fields not intended for customer access, including fields restricted to internal use...

2.1CVSS5.9AI score0.00035EPSS
Exploits0References4
Rows per page
Query Builder