CVE-2021-35303

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-35303

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-35303

Published

2021-06-28T20:15:08.167Z

Modified

2026-03-14T11:01:03.677748Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.

References

Affected packages

Type

GIT

Repo

https://github.com/zammad/zammad

Events

Introduced

Last affected

Database specific

{
    "versions": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "4.0.0"
        }
    ]
}

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35303.json"