CVE-2023-50456: 
NixOS vulnerability analysis and mitigation

An issue was discovered in Zammad before version 6.2.0 where an attacker can trigger phishing links in generated notification emails by manipulating crafted first or last name fields due to insufficient input validation (NVD, Zammad Advisory).

The vulnerability stems from improper input validation of user data, specifically in the first and last name fields. When these fields contain malicious data, it can result in phishing links being included in notification emails generated by the system. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (NVD).

The vulnerability allows attackers to inject phishing links into notification emails generated by the system, potentially leading to phishing attacks against users who receive these notifications (Zammad Advisory).

The vulnerability has been fixed in Zammad version 6.2.0. Users are recommended to upgrade to this version or later. Updates can be obtained through the official Zammad website, FTP server, or through the OS package manager (Zammad Advisory).