CVE-2023-50456

2023-12-1000:00:00

mitre

www.cve.org

zammad

6.2.0

phishing

vulnerability

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.

References

zammad.com/en/advisories/zaa-2023-07