CVE-2023-31597 (zammad)

May 18, 2023, 6:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.

access address attackers bypass cve data e-mail generated issue mail tickets unauthorized access verification

Visit resource

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Cyber Security Engineer I

@ Fortress Security Risk Management | Cleveland, OH, United States

View on infosec-jobs.com

Senior DevSecOps Engineer

@ Wisk Aero | Remote United States

View on infosec-jobs.com

Vulnerable Adult Investigator - Vice President

@ JPMorgan Chase & Co. | Chicago, IL, United States

View on infosec-jobs.com

Consultant Réseaux IT Digital Impulse - H/F

@ Talan | Paris, France

View on infosec-jobs.com

DevSecOps Engineer (Onsite)

@ Accenture Federal Services | Arlington, VA

View on infosec-jobs.com

Senior Security Engineer

@ Minitab | State College, Pennsylvania, United States

View on infosec-jobs.com

View more jobs

all InfoSec news

CVE-2023-31597 (zammad)

More from web.nvd.nist.gov / National Vulnerability Database

Jobs in InfoSec / Cybersecurity

Cyber Security Engineer I

Senior DevSecOps Engineer

Vulnerable Adult Investigator - Vice President

Consultant Réseaux IT Digital Impulse - H/F

DevSecOps Engineer (Onsite)

Senior Security Engineer