medium6.1
CVE-2017-5621
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
Impact
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via malicious HTML in a chat message or the content of a ticket article, when using either the REST API or the WebSocket API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | through 1.0.3 Versions 1.1.0, 1.1.1, 1.1.2, 1.2.0 |