CVE-2023-31597 (published 2023-05-18T00:00:00)
An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a