Zohar Cochavi

A session hijack issue allows for remote code execution as the zammad user. Approximately 12,000 instances have been identified globally.

Improper privilege management allows a local zammad user to escalate privileges to root.