CVE-2020-10098

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-10098
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10098.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-10098
Published
2020-03-05T01:15:11.147Z
Modified
2026-07-26T05:53:56.909896Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Email functionality. The malicious JavaScript will execute within the browser of any user who opens the Ticket with the Article created from that Email.

References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type
GIT
Repo
https://github.com/zammad/zammad
Events
Introduced
a5f3c622a3e6e1fd05ae32a28aa0d7f5237f0bec
Last affected
e0ff35cb1492d1fd09f971ead0426ea6acbbef30
Database specific 
{
    "cpe": "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "3.2.0"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10098.json"