CVE-2020-10099

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-10099
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10099.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-10099
Published
2020-03-05T01:15:11.223Z
Modified
2026-03-14T09:47:59.933846Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Ticket functionality in Zammad. The malicious JavaScript will execute within the browser of any user who opens the ticket or has the ticket within the Toolbar.

References

Affected packages

Git / github.com/zammad/zammad

Affected ranges

Type
GIT
Repo
https://github.com/zammad/zammad
Events
Introduced
9bdf6d7b816d4e55501e13d12dc0d9b53cf16f5c
Last affected
e0ff35cb1492d1fd09f971ead0426ea6acbbef30
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "3.2.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10099.json"