CVE-2020-26031

2020-12-2808:15:11

Google

osv.dev

zammad

global-search

leaking

knowledge base

drafts

authenticated

insufficient permissions

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

22.7%

JSON

An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base readers (who are authenticated but have insufficient permissions).

References

zammad.com/news/security-advisory-zaa-2020-16