Design/Logic Flaw

2023-02-0301:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

zammad v5.3.0

code execution

privilege escalation

crafted message

server vulnerability

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.

CPENameOperatorVersion
zammadeq5.3.0

CPE	Name	Operator	Version
	zammad	eq	5.3.0

References

zammad.com/de/advisories/zaa-2022-11