CVE-2023-29868

Published: 2023-05-02T16:15Z

Last Modified: 2025-01-30T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt