CVE-2020-26031

2020-12-2807:57:06

mitre

www.cve.org

zammad

global search

leakage

knowledge base

drafts

authenticated

readers

insufficient permissions

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers (who are authenticated but have insufficient permissions).

References

zammad.com/news/security-advisory-zaa-2020-16