CVE-2022-48021

CRITICAL CVSS: 9.8 Published: 2023-02-03 Modified: 2026-06-17

Description

A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.

Affected Platforms

Zammad Zammad

Weakness Type

NVD-CWE-noinfo

References