VULNERABILITY INTELLIGENCE

CVE-2020-10099

CVSS score5.4 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2020-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Ticket functionality in Zammad. The malicious JavaScript will execute within the browser of any user who opens the ticket or has the ticket within the Toolbar.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references