CyberRota Analysis
AI-GeneratedThe vulnerability affects the Zammad helpdesk system prior to version 7.1.2, where the destroy_form action in the AttachmentsController allows authenticated users to delete another user's temporary file uploads based solely on a user-supplied form_id. This could lead to unauthorized removal of pending uploads, potentially disrupting user submissions. Organizations using Zammad should prioritize upgrading to version 7.1.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroy_form action on AttachmentsController deletes UploadCache Store records based solely on a user-supplied form_id without verifying that the requesting user owns those records. An authenticated attacker who learns another user's pending-upload UUID can silently remove temporary file uploads before the victim submits their ticket or article. This issue is fixed in version 7.1.2.