CVE-2020-26033 – An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API

An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26033

Reference (s):

• https://zammad.com/news/security-advisory-zaa-2020-17