Lucene search
MitreCVELIST:CVE-2023-29868HistoryMay 02, 2023 - 12:00 a.m.
CVE-2023-29868
2023-05-0200:00:00
mitre
www.cve.org
zammad vulnerability access control unauthorized changes customer permissions
0.0005 Low
EPSS
Percentile
17.5%
Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions.
References
Related
nvd
nvd
CVE-2023-29868
2023-05-02 16:15:08
osv
osv
CVE-2023-29868
2023-05-02 16:15:08
cve
cve
CVE-2023-29868
2023-05-02 16:15:08
prion
prion
Improper access control
2023-05-02 16:15:00