CVE-2020-29160

HIGH

Zammad < 3.5.1 - Missing Authorization

Title source: rule
STIX 2.1

Description

An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0019
EPSS Percentile 41.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-862
Status published
Products (1)
zammad/zammad < 3.5.1
Published Dec 28, 2020
Tracked Since Feb 18, 2026