Non évaluée

Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register...

CVE-2020-14214 Première détection SecPulse Jun 17, 2020

Description d'origine La description telle que publiée par la source (souvent en anglais).

Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all tickets of an arbitrary Organization.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory zammad.com
patch github.com

Faits clés

Gravité: Non évaluée
Publication: Jun 17, 2020
Première détection SecPulse: Jun 17, 2020

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51