Cross site request forgery (csrf)

2021-10-0721:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a crafted request.

CPENameOperatorVersion
zammadlt4.1.1

CPE	Name	Operator	Version
	zammad	lt	4.1.1

References

zammad.com/en/advisories/zaa-2021-09