medium5.3
CVE-2020-10105
An issue was discovered in Zammad 3.0 through 3.2.
Impact
An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html (/zammad/public/404.html)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | from 1.0.0 through 3.2.0 |