Podatność ZAA-2020-17

Security Advisory Details

• ID: ZAA-2020-17
• Date: 09/22/2020
• Title: Tag and Link REST API endpoints lack CSRF token check
• Severity: low
• Product: Zammad 1.0.x up to 3.4.0
• Fixed in: Zammad 3.4.1, 3.5.0
• References:
  –> CVE: Pending

Online version of this advisory: https://zammad.com/en/advisories/zaa-2020-17