CVE-2024-48937

概要

参考情報

• znuny.com · Product
• znuny.org/en/advisories · Vendor Advisory
• znuny.org/en/advisories/zsa-2024-05 · Vendor Advisory

znuny のその他の脆弱性

• CVE-2025-26846緊急 9.8An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metada…
• CVE-2025-26847高 7.5An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked.
• CVE-2025-26845緊急 9.8An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a …
• CVE-2025-43926中 6.1An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be…
• CVE-2025-26844緊急 9.8An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.