Rezultati pretraživanja za 'Proizvođač: zammad'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-102489 | 9.8 | Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying frame | 2026-10-09 16:17:20 | 2026-09-30 17:16:40 |
| CVE-2026-102490 | 7.8 | Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began | 2026-10-09 14:21:05 | 2026-09-30 17:16:40 |
| CVE-2026-34837 | 4.3 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, he REST endpoint POST /api/v1/ai_assistance/text_tools/:id contains an authorization failure. Context data (e.g., a group or organization) supplied to be used in the | 2026-04-17 15:51:43 | 2026-04-08 19:25:23 |
| CVE-2026-34248 | 5.7 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, customers in shared organizations (means they can see each other's tickets) could see fields which are not intended for customers - including fields not intended for | 2026-04-17 15:48:48 | 2026-04-08 19:25:21 |
| CVE-2026-34718 | 6.1 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the HTML sanitizer for ticket articles was missing proper sanitization of data: ... URI schemes, resulting in storing such malicious content in the database | 2026-04-17 15:39:43 | 2026-04-08 19:25:21 |
| CVE-2026-34719 | 4.3 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme (HTTP/HTTPS) as well as the hostnam | 2026-04-17 15:27:09 | 2026-04-08 19:25:22 |
| CVE-2026-34720 | 4.3 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the SSO mechanism in Zammad was not verifying the header originates from a trusted SSO proxy/gateway before applying further actions on it. This vulnerabili | 2026-04-17 15:25:11 | 2026-04-08 19:25:22 |
| CVE-2026-34721 | 6.5 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the OAuth callback endpoints for Microsoft, Google, and Facebook external credentials do not validate a CSRF state parameter. This vulnerability is fixed in | 2026-04-17 15:23:43 | 2026-04-08 19:25:22 |
| CVE-2026-34722 | 4.3 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and | 2026-04-17 15:14:07 | 2026-04-08 19:25:22 |
| CVE-2026-34723 | 7.5 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, unauthenticated remote attackers were able to access the getting started endpoint to get access to sensitive internal entity data, even after the system set | 2026-04-17 15:10:09 | 2026-04-08 19:25:22 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/10
Zapisa po stranici: