CVE-2023-29868

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-29868

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29868.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-29868

Published

2023-05-02T00:00:00Z

Modified

2026-08-12T03:51:30.838263018Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29868.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type

GIT

Repo

https://github.com/zammad/zammad

Events

Introduced

0266d1733788c637012e38fc8c6de908d37174be

Fixed

2fb8d15c59184bac8a49d4f4e4ba499dec9b581b

Database specific

Show details

{
    "cpe": "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.3.0"
        },
        {
            "fixed": "5.4.0"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-29868.json"