TI-2025-23442 CVE-2025-32360 · GHSA-cqmw-qrqr-v255
In Zammad 6.4.x before 6.4.2, there is information exposure.
Priority LOW 35
In Zammad 6.4.x before 6.4.2, there is information exposure.
Vulnerabilities
4 records
TI-2025-23441 CVE-2025-32359 · GHSA-g3qr-3fvc-4fm6
In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.
Priority LOW 38
In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.
TI-2025-23440 CVE-2025-32358 · GHSA-h7vp-w2vp-6c97
Server-side request forgery in Zammad
Priority LOW 19
In Zammad 6.4.x before 6.4.2, SSRF can occur.
TI-2025-23439 CVE-2025-32357 · GHSA-9879-4r59-96j2
Authentication bypass in Zammad
Priority LOW 20
In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.