medium4.3
CVE-2021-35300
Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.
Impact
Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | from 1.0.0 through 4.0.0 |