CVE-2024-49193: Email Spoofing in Zendesk 🔥

Knowing the support email and ticket id, an attacker can view the entire history of the ticket, thus gaining access to sensitive data.

Search at Netlas.io:
👉 Link: https://nt.ls/dWuES
👉 Dork: http.unknown_headers.key:"x_zendesk_processed_host_header" OR http.unknown_headers.key:"x_zendesk_origin_server"

Read more: https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b9d2cf2e52