{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-15T12:33:23.739","vulnerabilities":[{"cve":{"id":"CVE-2022-48023","sourceIdentifier":"cve@mitre.org","published":"2023-02-03T01:15:13.527","lastModified":"2024-11-21T07:32:45.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags."},{"lang":"es","value":"La verificación de privilegios insuficiente en Zammad v5.3.0 permite a un atacante autenticado realizar cambios en las etiquetas de los tickets de sus clientes utilizando la API de Zammad. Esto ahora se corrigió en la versión 5.3.1 para que solo los agentes con permisos de escritura puedan cambiar las etiquetas de los tickets."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zammad:zammad:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"673641B9-567C-4E84-9405-CA81BC7E2539"}]}]}],"references":[{"url":"https://zammad.com/de/advisories/zaa-2022-12","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://zammad.com/de/advisories/zaa-2022-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}