Rajesh Pangare

**Name of the Vulnerable Software and Affected Versions** Zammad versions prior to 4.1.1 **Description** An issue allows an Agent account to modify account data and gain admin access via a crafted request. **Recommendations** For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zammad versions prior to 4.1.1 **Description** An issue was discovered in the software, allowing Server-Side Request Forgery (SSRF) to occur via GitHub or GitLab integration. **Recommendations** For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zammad versions prior to 4.1.1 **Description** An issue in Zammad allows Command Injection to occur via custom Packages. **Recommendations** For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue.