CVE-2023-50454

An issue was discovered in Zammad before 6.2.0

published December 10, 2023

CVSS
—
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Published
2023-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    An issue was discovered in Zammad before 6.2.0
    cvelistv5