Описание
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.1.0 (включая) до 2.1.2 (включая)Версия от 2.2.0 (включая) до 2.2.1 (включая)
Одно из
cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*
cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*
cpe:2.3:a:zammad:zammad:2.3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00361
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-80
CWE-79
Связанные уязвимости
CVSS3: 6.1
debian
больше 6 лет назад
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Script ...
CVSS3: 6.1
github
больше 3 лет назад
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.
EPSS
Процентиль: 58%
0.00361
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-80
CWE-79