medium6.1
CVE-2017-5620
An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
Impact
An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | through 1.0.3 Versions 1.1.0, 1.1.1, 1.1.2, 1.2.0 |