Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-85q9-82qf-837m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process.

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process.

EPSS

Процентиль: 71%
0.00692
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
почти 6 лет назад

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process.

CVSS3: 7.5
debian
почти 6 лет назад

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket serve ...

EPSS

Процентиль: 71%
0.00692
Низкий

Дефекты

CWE-20