CISA adds Zammad GmbH Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Zammad vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The source describes their exploitation in an attack against the Dutch Institute for Vulnerability Disclosure’s ticketing system.