zammad vulnerabilities

CVEs whose affected-version data names the zammad package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-33668Critical· 9.1PoC

2y ago

An issue was discovered in Zammad before 6.3.0

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no …

▾ Abyssalzammad · zammadEPSS 0.45%via NVD