Rezultati pretraživanja za 'Proizvođač: zammad'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10097 | 5.0 | An issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that disclose internal application or infrastructure information. This information could aid attackers in successfully exploiting other vulnerabilities. | 2020-03-05 19:16:00 | 2020-03-05 01:15:00 |
| CVE-2020-10099 | 3.5 | An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Ticket functionality in Zammad. The malicious JavaScript will execute within the browser of any user who opens the ticket or ha | 2020-03-05 19:12:00 | 2020-03-05 01:15:00 |
| CVE-2020-10098 | 3.5 | An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Email functionality. The malicious JavaScript will execute within the browser of any user who opens the Ticket with the Article | 2020-03-05 19:12:00 | 2020-03-05 01:15:00 |
| CVE-2020-10103 | 3.5 | An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the File Upload functionality in Zammad. The malicious JavaScript will execute within the browser of any user who opens a specially | 2020-03-05 19:08:00 | 2020-03-05 01:15:00 |
| CVE-2020-10104 | 4.0 | An issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive information to the user that may be compromised and used by an attacker to gain unauthorized access. Hashed passwords are returned to the user when visiti | 2020-03-05 19:07:00 | 2020-03-05 01:15:00 |
| CVE-2019-1010018 | 4.3 | Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: | 2019-10-09 23:44:00 | 2019-07-16 13:15:00 |
| CVE-2017-6080 | 7.5 | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerability, an attacker can send cross-domain requests direc | 2019-10-03 00:03:00 | 2017-03-13 06:59:00 |
| CVE-2017-5619 | 7.5 | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string. | 2019-10-03 00:03:00 | 2017-03-13 06:59:00 |
| CVE-2017-6081 | 6.8 | A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie. | 2019-03-14 01:53:00 | 2017-03-13 06:59:00 |
| CVE-2018-1000154 | 4.3 | Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page (CWE-80) vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and | 2018-05-10 14:43:00 | 2018-04-05 13:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/10
Zapisa po stranici: