CVE-2020-10099 - An XSS issue was discovered in Zammad 3.0 through 3.2

Back Back to CVE browser

MEDIUM

An XSS issue was discovered in Zammad 3.0 through 3.2

Published Mar 5, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Ticket functionality in Zammad. The malicious JavaScript will execute within the browser of any user who opens the ticket or has the ticket within the Toolbar.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2564
Advisory
https://zammad.com/news/security-advisory-zaa-2020-01
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2564		Advisory
https://zammad.com/news/security-advisory-zaa-2020-01		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 5, 2020

Updated Aug 4, 2024

Reserved Mar 5, 2020

Link CVE-2020-10099

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-10099

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 5, 2020

Updated Aug 4, 2024

Link EUVD-2020-2564

GitHub

No data