Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
123 results · page 2 of 3
Apr 25, 2024An issue was discovered in Zammad before 6.3.0.CVE-2024-33667 · Other software · Zammad · reported by MITREMedium 6.5
An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 25, 2024An issue was discovered in Zammad before 6.3.0.CVE-2024-33666 · Other software · Zimmad · reported by MITREHigh 8.6
An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.
- Product
- Zimmad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2023An issue was discovered in Zammad before 6.2.0.CVE-2023-50457 · Other software · Zammad · reported by MITREMedium 4.3
An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2023An issue was discovered in Zammad before 6.2.0.CVE-2023-50456 · Other software · Zammad · reported by MITREMedium 5.3
An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2023An issue was discovered in Zammad before 6.2.0.CVE-2023-50455 · Other software · Zammad · reported by MITREHigh 7.5
An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim).
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2023An issue was discovered in Zammad before 6.2.0.CVE-2023-50454 · Other software · Zammad · reported by MITREMedium 5.9
An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2023An issue was discovered in Zammad before 6.2.0.CVE-2023-50453 · Other software · Zammad · reported by MITREMedium 5.3
An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 18, 2023An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user.CVE-2023-31597 · Other software · Zammad · reported by MITREMedium 6.5
An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2023Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control.CVE-2023-29868 · Other software · Zammad · reported by MITREMedium 6.5
Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2023Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control.CVE-2023-29867 · Other software · Zammad · reported by MITREMedium 6.5
Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2023Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad CVE-2022-48023 · Other software · Zammad · reported by MITREMedium 4.3
Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2023An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are notCVE-2022-48022 · Other software · Zammad · reported by MITREMedium 4.3
An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2023A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.CVE-2022-48021 · Other software · Zammad · reported by MITRECritical 9.8
A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2022Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets.CVE-2022-40817 · Other software · Zammad · reported by MITREMedium 4.3
Zammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to tickets. However, agents were still wrongly able to perform some operations on such tickets, like adding and removing links, tags. and related answers. This issue has been fixed in 5.2.2.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2022Zammad 5.2.1 is vulnerable to Incorrect Access Control.CVE-2022-40816 · Other software · Zammad · reported by MITREMedium 6.5
Zammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic to ensure that customer users are not able to see personal information of other users. This logic was not effective when used through a web socket connection, so that a logged-in attacker would be able to fetch personal data of other users by querying the Zammad API. This issue is fixed in , 5.2.2.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2022Zammad 5.2.0 is vulnerable to privilege escalation.CVE-2022-35490 · Other software · Zammad · reported by MITRECritical 9.8
Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more than the configured amount of requests before the user invalidation takes place.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2022In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are aCVE-2022-35489 · Other software · Zammad · reported by MITREMedium 6.5
In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2022In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account tCVE-2022-35488 · Other software · Zammad · reported by MITREHigh 7.5
In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of Service by many generated emails which would also spam the victim.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2022Zammad 5.2.0 suffers from Incorrect Access Control.CVE-2022-35487 · Other software · Zammad · reported by MITREHigh 7.5
Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2022A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, CVE-2022-29701 · Other software · Zammad · reported by MITREHigh 7.5
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2022A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during passCVE-2022-29700 · Other software · Zammad · reported by MITREHigh 7.5
A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2022An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.CVE-2022-27332 · Other software · Zammad · reported by MITRECritical 9.1
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. This vulnerability can allow attackers to execute phishing attacks or cause a Denial of Service (DoS).
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2022An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settingCVE-2022-27331 · Other software · Zammad · reported by MITREMedium 4.3
An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2022In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons.CVE-2021-44886 · Other software · Zammad · reported by MITREMedium 5.3
In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substitute persons didn't have the same permissions as the original agent, they could receive ticket notifications for tickets that they have no access to.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2022With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.CVE-2021-43145 · Other software · Zammad · reported by MITREHigh 8.1
With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2021An issue was discovered in Zammad before 5.0.1.CVE-2021-42137 · Other software · Zammad · reported by MITREMedium 5.3
An issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the privilege requirement for viewing a list of tickets that shows title, state, etc.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42091 · Other software · Zammad · reported by MITRECritical 9.1
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42090 · Other software · Zammad · reported by MITRECritical 9.8
An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42089 · Other software · Zammad · reported by MITREHigh 7.5
An issue was discovered in Zammad before 4.1.1. The REST API discloses sensitive information.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42088 · Other software · Zammad · reported by MITREMedium 6.1
An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42087 · Other software · Zammad · reported by MITREMedium 4.9
An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42086 · Other software · Zammad · reported by MITREHigh 8.8
An issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain admin access, via a crafted request.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42085 · Other software · Zammad · reported by MITREMedium 5.4
An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42084 · Other software · Zammad · reported by MITREMedium 6.5
An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42094 · Other software · Zammad · reported by MITRECritical 9.8
An issue was discovered in Zammad before 4.1.1. Command Injection can occur via custom Packages.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42093 · Other software · Zammad · reported by MITREHigh 7.2
An issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafted request that manipulates triggers.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 7, 2021An issue was discovered in Zammad before 4.1.1.CVE-2021-42092 · Other software · Zammad · reported by MITREMedium 5.4
An issue was discovered in Zammad before 4.1.1. Stored XSS may occur via an Article during addition of an attachment to a Ticket.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.CVE-2021-35303 · Other software · Zammad · reported by MITREMedium 6.1
Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information.CVE-2021-35302 · Other software · Zammad · reported by MITREMedium 5.3
Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view.CVE-2021-35301 · Other software · Zammad · reported by MITREMedium 5.3
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.CVE-2021-35300 · Other software · Zammad · reported by MITREMedium 4.3
Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.CVE-2021-35299 · Other software · Zammad · reported by MITREHigh 7.5
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via multiple models that contain a 'note'CVE-2021-35298 · Other software · Zammad · reported by MITREMedium 6.1
Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via multiple models that contain a 'note' field to store additional information.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An issue was discovered in Zammad before 3.5.1.CVE-2020-29160 · Other software · Zammad · reported by MITREHigh 7.5
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An issue was discovered in Zammad before 3.5.1.CVE-2020-29159 · Other software · Zammad · reported by MITREMedium 4.9
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An issue was discovered in Zammad before 3.5.1.CVE-2020-29158 · Other software · Zammad · reported by MITREMedium 4.3
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An issue was discovered in Zammad before 3.4.1.CVE-2020-26035 · Other software · Zammad · reported by MITREMedium 5.4
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An account-enumeration issue was discovered in Zammad before 3.4.1.CVE-2020-26034 · Other software · Zammad · reported by MITREMedium 4.3
An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on whether the input supplied was recognized as associated with a valid user.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An issue was discovered in Zammad before 3.4.1.CVE-2020-26033 · Other software · Zammad · reported by MITREMedium 5.4
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF token check.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 28, 2020An SSRF issue was discovered in Zammad before 3.4.1.CVE-2020-26032 · Other software · Zammad · reported by MITREHigh 7.5
An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a test request to the User. An attacker can use this to request any URL via a GET request from the network interface of the server. This may lead to disclosure of information from intranet systems.
- Product
- Zammad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.