"Submit a request" without being connected creates a ticket if you add an e-mail in CC (via the Form) with the agent in copy (CC) as a requester

Hello.

We faced some issues which have been identified (root cause) by your Support team. Good job, well done - details here => https://support.zendesk.com/requests/10246937

If one of our authenticated clients creates a new ticket without being connected on the Zendesk Help Center, the ticket is created if the email of one of our agents is notified in CC inside the form. Then the requester of is new ticket is ... our agent.

The support team thinks this issue is not bug: we don't agree.  It's easy to be replicated (all the times).

If many tickets are created by some users (clients or unknown people) who are not connected then our agents become the requesters if their email is in CC: this is not a correct behaviour.  By default, if the user is not connected, the ticket has not to be created (or it has to be suspended) if a CC email is filled via the Zendesk form. 

Imagine if some hackers use the email address of one of our agents, they can create thousands of tickets with this process... 

Please check with your Product Owners and Developement teams to fix this bug.  You have got the complete information, don't ask us to create a new request or interact again with your own Zendesk support team.

Regards,