Zendesk vulnerabilities
We track 2 vulnerabilities in Zendesk products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Zendesk vulnerabilities
- 7.5 High severity
zendesk: Authentication Bypass by Spoofing
Zendesk before 2024-07-02 allows remote attackers to read ticket history via e-mail spoofing, because Cc fields are extracted from incoming e-mail messages and used to grant additional authorization for ticket viewing, the mechanism for detecting spoofed e-mai
- 8.8 High severity
Samson: Deserialization of Untrusted Data
Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController. The role parameter flows into the RoleConfigFile initializer and then into the Kubernetes::Util.parse_file method where it is unsafely dese