CVE-2023-29868
Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unautho...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory zammad.com