CVE-2022-35487

Zammad 5.2.0 suffers from Incorrect Access Control

published August 8, 2022

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.6th percentile
Published
2022-08-08T13:51Z
EPSS history
Timeline
  • 08 AUG 13:51Z
    Zammad 5.2.0 suffers from Incorrect Access Control
    cvelistv5