Unrated

An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin....

CVE-2020-29159 First seen on SecPulse Dec 28, 2020

Original description The description as published by the source.

An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory zammad.com
patch github.com

Key facts

Severity: Unrated
Published: Dec 28, 2020
First seen on SecPulse: Dec 28, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:53