Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zammad'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-42094 7.5 An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages. 2021-10-14 14:44:00
CVE-2021-42093 6.5 An issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafted request that manipulates triggers. 2021-10-14 14:36:00
CVE-2021-42092 3.5 An issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during addition of an attachment to a Ticket. 2021-10-14 14:30:00
CVE-2021-42084 4.0 An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service. 2021-10-14 14:01:00
CVE-2021-42091 6.4 An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration. 2021-10-14 13:46:00
CVE-2021-42090 7.5 An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled. 2021-10-14 13:17:00
CVE-2021-42089 5.0 An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information. 2021-10-14 12:48:00
CVE-2021-42088 4.3 An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled. 2021-10-13 20:42:00
CVE-2021-42085 3.5 An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar. 2021-10-13 20:30:00
CVE-2020-29160 5.0 An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing. 2021-07-21 11:39:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/10
Zapisa po stranici: