CVE-2020-26033

An issue was discovered in Zammad before 3.4.1

published December 28, 2020

CVSS
—
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Published
2020-12-28T07:56Z
EPSS history
Timeline
  • 28 DEC 07:56Z
    An issue was discovered in Zammad before 3.4.1
    cvelistv5