CVE-2021-42137

2021-10-1104:02:32

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

An issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the privilege requirement for viewing a list of tickets that shows title, state, etc.

References

zammad.com/en/advisories/zaa-2021-19