CVE-2022-27331

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-27331

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27331.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-27331

Published

2022-04-27T02:47:09Z

Modified

2026-08-12T03:51:08.933693536Z

Summary

[none]

Details

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27331.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type

GIT

Repo

https://github.com/zammad/zammad

Events

Introduced

Fixed

eefae45c2ad6e6a96b8df631d2f50f290ecbd27d

Database specific

Show details

{
    "cpe": "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.1.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*

1.6.0

3.*

3.7.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27331.json"