CVE-2020-29160

CVE-2020-29160

EPSS 0.9%

An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/zammad/zammad/commit/28944de180a88698509a656f61558bf9d7f810f4 https://zammad.com/en/advisories/zaa-2020-24