An issue was discovered in Zammad before 6.3.0. (CVE-2024-33668)
Zammad versions prior to 6.3.0 have a vulnerability where the Upload Cache uses insecure and partially guessable FormIDs. This weakness allows an attacker to brute force these identifiers to upload malicious content to article drafts they should not have access to. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality and integrity without requiring privileges or user interaction.
AI Analysis
Technical Summary
CVE-2024-33668 affects Zammad versions before 6.3.0. The vulnerability arises because the Upload Cache mechanism relies on FormIDs that are insecure and partially guessable. An attacker can exploit this by brute forcing these FormIDs to upload malicious content into article drafts belonging to other users, bypassing access controls. This can lead to unauthorized content injection, compromising the integrity and confidentiality of the system's data.
Potential Impact
Successful exploitation allows an unauthenticated attacker to upload malicious content to article drafts they do not have permission to access. This compromises the confidentiality and integrity of the affected system's data. The CVSS score of 9.1 reflects critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.
Mitigation Recommendations
A fix is available in Zammad version 6.3.0. Users should upgrade to version 6.3.0 or later to remediate this vulnerability. Since no vendor advisory or patch link is provided, confirm patch availability and upgrade instructions from official Zammad sources before applying.
An issue was discovered in Zammad before 6.3.0. (CVE-2024-33668)
Description
Zammad versions prior to 6.3.0 have a vulnerability where the Upload Cache uses insecure and partially guessable FormIDs. This weakness allows an attacker to brute force these identifiers to upload malicious content to article drafts they should not have access to. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality and integrity without requiring privileges or user interaction.
CVSS v3.1
Score 9.1critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-33668 affects Zammad versions before 6.3.0. The vulnerability arises because the Upload Cache mechanism relies on FormIDs that are insecure and partially guessable. An attacker can exploit this by brute forcing these FormIDs to upload malicious content into article drafts belonging to other users, bypassing access controls. This can lead to unauthorized content injection, compromising the integrity and confidentiality of the system's data.
Potential Impact
Successful exploitation allows an unauthenticated attacker to upload malicious content to article drafts they do not have permission to access. This compromises the confidentiality and integrity of the affected system's data. The CVSS score of 9.1 reflects critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.
Mitigation Recommendations
A fix is available in Zammad version 6.3.0. Users should upgrade to version 6.3.0 or later to remediate this vulnerability. Since no vendor advisory or patch link is provided, confirm patch availability and upgrade instructions from official Zammad sources before applying.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-mxr8-qj6j-f7gq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2024-33668"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aab49bc55bf5e2cf5992a6b
Added to database: 09/17/2026, 02:00:28 UTC
Last enriched: 09/17/2026, 02:46:26 UTC
Last updated: 09/17/2026, 02:52:28 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.