CVE-2022-48023

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad…

published February 3, 2023

CVSS
—
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.1th percentile
Published
2023-02-03T00:00Z
EPSS history
Timeline
  • 03 FEB 00:00Z
    Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad…
    cvelistv5