VYPR

Zendesk

by Zendesk

CVEs (1)

  • CVE-2024-49193HigOct 12, 2024
    risk 0.49cvss 7.5epss 0.01

    Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is…