ZSA-2022-05

Date: 2022-06-14
Affected: All versions of Znuny LTS <= 6.0.43, Znuny <= 6.3.3, ((OTRS)) Community Edition <= 6.0.30
Severity: medium
CVE: pending

Administrators can modify user data to execute Perl code in AdminUser, in the context of the Znuny User.

Thanks to "Tim Püttmanns (maxence.de)" for the report.