CVE-2023-31597

2023-05-1800:00:00

mitre

www.cve.org

zammad v5.4.0

e-mail verification

manipulate user data

unauthorized access

0.001 Low

EPSS

Percentile

41.3%

JSON

An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.

References

zammad.com/de/advisories/zaa-2023-03

0.001 Low

EPSS

Percentile

41.3%

JSON

Related for CVELIST:CVE-2023-31597