7 matches found
CVE-2025-26846
An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...
CVE-2025-26845
An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...
CVE-2025-26847
An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked...
CVE-2025-26847
The Znuny work order system (versions prior to 7.1.5 ) is vulnerable to information disclosure because not all passwords are masked when generating a support bundle. This issue allows for the potential exposure of sensitive credentials. While the vulnerability is confirmed, the provided documents...
CVE-2025-26844
An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag...
