Debian/znuny: medium 6.1
An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the AgentPreferences UpdateAJAX subaction can be used to set user preferences with arbitrary keys. When fetc
Action: Upgrade znuny to 6.5.15-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.15-2 | - |
Fixed versions
| 6.5.15-2 |
Sources
- osv: DEBIAN-CVE-2025-43926#Debian:14/znuny
- https://security-tracker.debian.org/tracker/CVE-2025-43926
published · modified · JSON