Lucene search
PRIOn knowledge basePRION:CVE-2023-50453HistoryDec 10, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-12-1019:15:00
PRIOn knowledge base
www.prio-n.com
2
zammad
design flaw
logic flaw
public endpoint
user object
internal configuration data
An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zammad | eq | 6.1.0 alpha | |
| zammad | eq | 6.1.0 | |
| zammad | eq | 6.2.0 alpha |
References
Related
osv
osv
CVE-2023-50453
2023-12-10 19:15:07
nvd
nvd
CVE-2023-50453
2023-12-10 19:15:07
cve
cve
CVE-2023-50453
2023-12-10 19:15:07
cnvd
cnvd
Zammad Information Disclosure Vulnerability (CNVD-2023-9769727)
2023-12-13 00:00:00
cvelist
cvelist
CVE-2023-50453
2023-12-10 00:00:00