https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T04:26:59.503661+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2024-09088 bdu:2024-09088 2026-10-11T04:27:04.948444+00:00 bdu:2024-09088 https://vulnerability.circl.lu/vuln/fkie_cve-2024-49193 fkie_cve-2024-49193 2026-10-11T04:27:04.948500+00:00

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the support e-mail addresses associated with individual tickets are predictable.

 https://vulnerability.circl.lu/vuln/ghsa-vv5g-xq9c-77w7 GHSA-vv5g-xq9c-77w7 2026-10-11T04:27:04.948566+00:00

Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mail messages is insufficient, and the support e-mail addresses associated with individual tickets are predictable.