CVE-2025-32357 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they ha…
Medium CVSS: 4.3

CVE-2025-32357

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.
Vendor
Zammad
Product
Zammad
CWE
CWE-288
Yayın Tarihi
2025-04-05 21:15:39
Güncelleme
2025-04-15 16:37:00
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-288 Zammad MEDIUM Zammad 2025

Referanslar

https://zammad.com/en/advisories/zaa-2025-04