Threats tagged 'ghsa-mxr8-qj6j-f7gq'

Zammad versions prior to 6.3.0 have a vulnerability where the Upload Cache uses insecure and partially guessable FormIDs. This weakness allows an attacker to brute force these identifiers to upload malicious content to article drafts they should not have access to. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality and integrity without requiring privileges or user interaction.