CVE-2020-29158

Published December 28th, 2020

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view.

zammad/zammad

Zammad is a web based open source helpdesk/customer support system.

GitHub

5.72K