CVE-2024-49193

Zendesk software versions prior to 2024-07-02 are vulnerable to an improper authorization flaw that allows remote attackers to read ticket history. The root cause is an insufficient mechanism for detecting spoofed e-mail messages , combined with the fact that the software extracts Cc fields from ...