CVE Browser

Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha

Undisclosed RCE in Zammad v6.3 and higher

Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens

Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset

Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets

Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail

Zammad: Missing rate limiting allows password brute-forcing during two-factor login

Zammad: Sensitive Information Exposure in Integration Administration API

Zammad: S/MIME signature verification allows forged sender impersonation

Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

Zammad: Stored XSS via unescaped option labels in the object attribute options context UI

Zammad: Account takeover via unverified email matching during SSO auto-link

Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration

Zammad: Remote image tracking bypass via shortened URL scheme

Zammad: Channel admins can read unauthorized attachments via signature rich-text body

Zammad: AI Agent template sanitizer bypass leads to remote code execution

Zammad: Pending upload deletion bypass via legacy attachment endpoint

Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller

Zammad: Cross-User Taskbar Item Access Control Vulnerability

Zammad: Denial of Service via OTRS Import Controller

Zammad: Malicious input in Ticket Body Enables Session Termination

Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers

Zammad: Incorrect Authorization and Improper Privilege Management

Zammad: Cross-Site Scripting in Ticket Notifications