admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-33666.md
0xMarcio 8932a8488d Update CVE sources 2024-06-08 09:32
2024-06-08 09:32:58 +00:00

656 B
Raw Permalink Blame History

CVE-2024-33666

Description

An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.

POC

Reference

No PoCs from references.

Github