Insufficient privilege verification... CVE-2022-48023
-
AV
AC
AU
C
I
A
发布：
2023-02-03
修订：
2024-11-21
Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
