Cross Site Scripting Vulnerability in Zammad Web Application by Zammad GmbH
CVE-2019-1010018
6.1MEDIUM
What is CVE-2019-1010018?
The Zammad web application versions up to 2.3.0 are susceptible to a Cross Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary JavaScript code in the context of a user's browser. This occurs when a victim opens a specially crafted support ticket. Users are encouraged to upgrade to fixed versions 2.3.1, 2.2.2, or 2.1.3 to mitigate the risk associated with this vulnerability.
Affected Version(s)
Zammad ≤ 2.3.0 [fixed: 2.3.1
Zammad 2.2.2 and 2.1.3]