Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content th...

CVE-2025-32357 First seen on SecPulse
Original description The description as published by the source.

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details