CVE-2023-31597: Medium severity zammad vulnerability
An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for Zammad v5.4.0?
The vulnerability ID for Zammad v5.4.0 is CVE-2023-31597.
What is the severity of CVE-2023-31597?
The severity of CVE-2023-31597 is medium with a CVSS score of 6.5.
How does CVE-2023-31597 affect Zammad v5.4.0?
CVE-2023-31597 allows attackers to bypass e-mail verification and manipulate user data, as well as gain unauthorized access to existing tickets in Zammad v5.4.0.
How can an attacker exploit CVE-2023-31597?
An attacker can exploit CVE-2023-31597 by using an arbitrary email address to bypass e-mail verification and manipulate user data, as well as gain unauthorized access to existing tickets.
Is there a fix available for CVE-2023-31597?
Yes, a fix for CVE-2023-31597 is available. Please refer to the official advisory from Zammad for more information.