CVE-2020-10105

An issue was discovered in Zammad 3.0 through 3.2

published March 5, 2020

CVSS
—
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html (/zammad/public/404.html)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00901 · 59.3th percentile
Published
2020-03-05T00:36Z
EPSS history
Timeline
  • 05 MAR 00:36Z
    An issue was discovered in Zammad 3.0 through 3.2
    cvelistv5