Description (CNA)
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://zammad.com/en/advisories/zaa-2020-24
- https://github.com/zammad/zammad/commit/28944de180a88698509a656f61558bf9d7f810f4
ADP enrichment
No English description supplied.