CVE-2017-5621

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1

published March 13, 2017

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Published
2017-03-13T06:14Z
EPSS history
Timeline
  • 13 MAR 06:14Z
    An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1
    cvelistv5