VULNERABILITY INTELLIGENCE
CVE-2020-10097
CVSS score5.3 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2020-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
An issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages that disclose internal application or infrastructure information. This information could aid attackers in successfully exploiting other vulnerabilities.
Weakness classification
- nvd@nist.gov: CWE-209
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory