CVE-2022-27332

CRITICAL · CVSS 9.1 EPSS 1.05%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-27332

Severity

CRITICAL

CVSS

9.1

EPSS

1.05%

Original NVD Description

An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service (DoS).