Phishing Vulnerability in Zammad Messaging System by Zammad

CVE-2023-50456

What is CVE-2023-50456?

A recent issue discovered in Zammad versions before 6.2.0 allows attackers to exploit the system by embedding phishing links in the notification emails. This is achieved through the manipulation of the first or last name fields, enabling an attacker to craft deceptive email content that may lead unsuspecting users to malicious sites, jeopardizing user credentials and sensitive information. Users are advised to upgrade to version 6.2.0 or later to mitigate this security risk. For more information, visit the Zammad advisory.

References