CVE-2017-5620

An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1

published March 13, 2017

CVSS
—
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.1th percentile
Published
2017-03-13T06:14Z
EPSS history
Timeline
  • 13 MAR 06:14Z
    An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1
    cvelistv5