CVE-2024-33668

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-33668
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33668.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-33668
Published
2024-04-26T00:00:00Z
Modified
2026-07-15T02:11:36.067132315Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/33xxx/CVE-2024-33668.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "6.3.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ],
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type
GIT
Repo
https://github.com/zammad/zammad
Events
Introduced
6c358ca90cf7f7581aede5c45d10ac3f2e25bc52
Fixed
1e2f95d33f1ab16fd0d447b409e8c409c747c3c9
Introduced
a6152567d3d965ce9f9aaef42d60c5d54003075c
Last affected
a6152567d3d965ce9f9aaef42d60c5d54003075c
Database specific 
{
    "extracted_events": [
        {
            "introduced": "6.2.0"
        },
        {
            "fixed": "6.3.0"
        },
        {
            "introduced": "6.3.0-alpha"
        },
        {
            "last_affected": "6.3.0-alpha"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:zammad:zammad:6.3.0:alpha:*:*:*:*:*:*"
    ]
}

Affected versions

6.*
6.3.0-alpha

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33668.json"