CVE-2024-49193

Zendesk versions prior to 2024-07-02 are vulnerable to an improper authorization flaw (CWE-290) that allows remote attackers to read ticket history via e-mail spoofing . The root cause is that the system extracts Cc fields from incoming emails to grant additional viewing privileges without suffic...