CVE-2024-33666
An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should b…
Published: 2024-04-26 · CVSS: 8.6 · CVSS 3.1
An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7