Search
Find a vulnerability
Search criteria
6 vulnerabilities by Zammad GmbH
CVE-2026-102490 (GCVE-0-2026-102490)
Vulnerability from nvd – Published: 2026-09-30 16:21 – Updated: 2026-10-08 19:55 X_Known Exploited Vulnerability X_Open SourceTitle
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
Summary
Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.
Severity
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 00:00 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://csirt.divd.nl/DIVD-2026-00015 | third-party-advisory |
| https://csirt.divd.nl/CVE-2026-102490 | third-party-advisory |
| https://zammad.com/en/advisories/cve-2026-102489-… | vendor-advisory |
| https://github.com/zammad/zammad/security/advisor… | vendor-advisorytechnical-description |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Affected:
1.5.0 , < 7.2.2
(semver)
Unknown: * , < 1.5.0 (semver) Unaffected: 7.2.2 , < * (semver) |
Date Public
2026-09-29 20:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102490",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-10-02",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-03T03:55:35.743Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-02T00:00:00.000Z",
"value": "CVE-2026-102490 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"lessThan": "7.2.2",
"status": "affected",
"version": "1.5.0",
"versionType": "semver"
},
{
"lessThan": "1.5.0",
"status": "unknown",
"version": "*",
"versionType": "semver"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "7.2.2",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Earth Grob (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Luke Paris (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Tijmen van der Spijk (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Zohar Cochavi (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Alje Woltjer (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Mischa Rick van Geelen (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Ralph Horn (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Max van der Horst (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Victor Pasman (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Frank Breedijk (DIVD)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zammad"
}
],
"datePublic": "2026-09-29T20:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged \u003ccode\u003ezammad\u003c/code\u003e service account to escalate to full \u003ccode\u003eroot\u003c/code\u003e privileges on the host. Service processes began running as \u003ccode\u003eroot\u003c/code\u003e and executed files that were owned and writable by the \u003ccode\u003ezammad\u003c/code\u003e account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected \u2014 installations from source or the official container images were not. All released packaged versions were affected."
}
],
"value": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected \u2014 installations from source or the official container images were not. All released packaged versions were affected."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Chained with CVE-2026-102489"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:55:53.033Z",
"orgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"shortName": "DIVD"
},
"references": [
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/DIVD-2026-00015"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/CVE-2026-102490"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"
},
{
"tags": [
"vendor-advisory",
"technical-description"
],
"url": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq"
}
],
"source": {
"advisory": "DIVD-2026-00015",
"discovery": "INTERNAL"
},
"tags": [
"x_known-exploited-vulnerability",
"x_open-source"
],
"title": "Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"assignerShortName": "DIVD",
"cveId": "CVE-2026-102490",
"datePublished": "2026-09-30T16:21:20.601Z",
"dateReserved": "2026-09-29T09:46:12.490Z",
"dateUpdated": "2026-10-08T19:55:53.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102489 (GCVE-0-2026-102489)
Vulnerability from nvd – Published: 2026-09-30 16:21 – Updated: 2026-10-19 09:10 Unsupported When Assigned X_Known Exploited Vulnerability X_Open SourceTitle
Undisclosed RCE in Zammad v6.3 and higher
Summary
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.
Severity
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 00:00 UTC
CWE
- CWE-384 - Session Fixation
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://csirt.divd.nl/DIVD-2026-00015 | third-party-advisory |
| https://csirt.divd.nl/CVE-2026-102489 | third-party-advisory |
| https://zammad.com/en/advisories/cve-2026-102489-… | vendor-advisory |
| https://community.zammad.org/t/take-care-local-pr… | technical-description |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Unknown:
* , < 6.3.0
(semver)
Affected: 6.3.0 , < 6.5.4 (semver) Unknown: 7.0.0 , < 7.1.3 (semver) |
Date Public
2026-09-29 20:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102489",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-10-02",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384 Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-10T03:55:20.097Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux",
"Docker"
],
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"lessThan": "6.3.0",
"status": "unknown",
"version": "*",
"versionType": "semver"
},
{
"lessThan": "6.5.4",
"status": "affected",
"version": "6.3.0",
"versionType": "semver"
},
{
"lessThan": "7.1.3",
"status": "unknown",
"version": "7.0.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Earth Grob (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Luke Paris (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Tijmen van der Spijk (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Zohar Cochavi (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Alje Woltjer (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Mischa Rick van Geelen (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Ralph Horn (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Max van der Horst (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Victor Pasman (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Frank Breedijk (DIVD)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zammad"
}
],
"datePublic": "2026-09-29T20:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework."
}
],
"value": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Chained with CVE-2026-102490"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T09:10:59.656Z",
"orgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"shortName": "DIVD"
},
"references": [
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/DIVD-2026-00015"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/CVE-2026-102489"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"
},
{
"tags": [
"technical-description"
],
"url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2"
}
],
"source": {
"advisory": "DIVD-2026-00015",
"discovery": "INTERNAL"
},
"tags": [
"unsupported-when-assigned",
"x_known-exploited-vulnerability",
"x_open-source"
],
"title": "Undisclosed RCE in Zammad v6.3 and higher",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"assignerShortName": "DIVD",
"cveId": "CVE-2026-102489",
"datePublished": "2026-09-30T16:21:19.937Z",
"dateReserved": "2026-09-29T09:46:12.490Z",
"dateUpdated": "2026-10-19T09:10:59.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2019-1010018 (GCVE-0-2019-1010018)
Vulnerability from nvd – Published: 2019-07-16 12:35 – Updated: 2024-08-05 03:07
VLAI
EPSS
VEX
Summary
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.
Severity
No CVSS data available.
CWE
- CWE-80 - Cross Site Scripting (XSS) - CWE-80
References
3 references
| URL | Tags |
|---|---|
| https://github.com/zammad/zammad/compare/ea50d0c.… | x_refsource_MISC |
| https://github.com/zammad/zammad/compare/5c983f6.… | x_refsource_MISC |
| https://github.com/zammad/zammad/issues/1869 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Affected:
≤ 2.3.0 [fixed: 2.3.1
Affected: 2.2.2 and 2.1.3] |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:07:18.312Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/issues/1869"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"status": "affected",
"version": "\u2264 2.3.0 [fixed: 2.3.1"
},
{
"status": "affected",
"version": "2.2.2 and 2.1.3]"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-80",
"description": "Cross Site Scripting (XSS) - CWE-80",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-07-16T12:35:14.000Z",
"orgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"shortName": "dwf"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/issues/1869"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"ID": "CVE-2019-1010018",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zammad",
"version": {
"version_data": [
{
"version_value": "\u2264 2.3.0 [fixed: 2.3.1"
},
{
"version_value": "2.2.2 and 2.1.3]"
}
]
}
}
]
},
"vendor_name": "Zammad GmbH"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross Site Scripting (XSS) - CWE-80"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/zammad/zammad/compare/ea50d0c...238784d",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"name": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"name": "https://github.com/zammad/zammad/issues/1869",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/issues/1869"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"assignerShortName": "dwf",
"cveId": "CVE-2019-1010018",
"datePublished": "2019-07-16T12:35:14.000Z",
"dateReserved": "2019-03-20T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:07:18.312Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-102490 (GCVE-0-2026-102490)
Vulnerability from cvelistv5 – Published: 2026-09-30 16:21 – Updated: 2026-10-08 19:55 X_Known Exploited Vulnerability X_Open SourceTitle
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
Summary
Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected — installations from source or the official container images were not. All released packaged versions were affected.
Severity
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 00:00 UTC
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://csirt.divd.nl/DIVD-2026-00015 | third-party-advisory |
| https://csirt.divd.nl/CVE-2026-102490 | third-party-advisory |
| https://zammad.com/en/advisories/cve-2026-102489-… | vendor-advisory |
| https://github.com/zammad/zammad/security/advisor… | vendor-advisorytechnical-description |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Affected:
1.5.0 , < 7.2.2
(semver)
Unknown: * , < 1.5.0 (semver) Unaffected: 7.2.2 , < * (semver) |
Date Public
2026-09-29 20:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102490",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-10-02",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-03T03:55:35.743Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-02T00:00:00.000Z",
"value": "CVE-2026-102490 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"lessThan": "7.2.2",
"status": "affected",
"version": "1.5.0",
"versionType": "semver"
},
{
"lessThan": "1.5.0",
"status": "unknown",
"version": "*",
"versionType": "semver"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "7.2.2",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Earth Grob (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Luke Paris (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Tijmen van der Spijk (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Zohar Cochavi (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Alje Woltjer (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Mischa Rick van Geelen (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Ralph Horn (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Max van der Horst (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Victor Pasman (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Frank Breedijk (DIVD)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zammad"
}
],
"datePublic": "2026-09-29T20:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged \u003ccode\u003ezammad\u003c/code\u003e service account to escalate to full \u003ccode\u003eroot\u003c/code\u003e privileges on the host. Service processes began running as \u003ccode\u003eroot\u003c/code\u003e and executed files that were owned and writable by the \u003ccode\u003ezammad\u003c/code\u003e account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected \u2014 installations from source or the official container images were not. All released packaged versions were affected."
}
],
"value": "Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the zammad account before dropping their identity to that account. An attacker holding that foothold could have escalated within seconds, because the affected services were restarted automatically whenever they stopped; no administrator interaction was required. Only installations from the DEB and RPM packages were affected \u2014 installations from source or the official container images were not. All released packaged versions were affected."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:Y/V:D",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Chained with CVE-2026-102489"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T19:55:53.033Z",
"orgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"shortName": "DIVD"
},
"references": [
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/DIVD-2026-00015"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/CVE-2026-102490"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"
},
{
"tags": [
"vendor-advisory",
"technical-description"
],
"url": "https://github.com/zammad/zammad/security/advisories/GHSA-p97w-927q-8vxq"
}
],
"source": {
"advisory": "DIVD-2026-00015",
"discovery": "INTERNAL"
},
"tags": [
"x_known-exploited-vulnerability",
"x_open-source"
],
"title": "Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"assignerShortName": "DIVD",
"cveId": "CVE-2026-102490",
"datePublished": "2026-09-30T16:21:20.601Z",
"dateReserved": "2026-09-29T09:46:12.490Z",
"dateUpdated": "2026-10-08T19:55:53.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102489 (GCVE-0-2026-102489)
Vulnerability from cvelistv5 – Published: 2026-09-30 16:21 – Updated: 2026-10-19 09:10 Unsupported When Assigned X_Known Exploited Vulnerability X_Open SourceTitle
Undisclosed RCE in Zammad v6.3 and higher
Summary
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.
Severity
SSVC
Exploitation: active
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-02 00:00 UTC
CWE
- CWE-384 - Session Fixation
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://csirt.divd.nl/DIVD-2026-00015 | third-party-advisory |
| https://csirt.divd.nl/CVE-2026-102489 | third-party-advisory |
| https://zammad.com/en/advisories/cve-2026-102489-… | vendor-advisory |
| https://community.zammad.org/t/take-care-local-pr… | technical-description |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Unknown:
* , < 6.3.0
(semver)
Affected: 6.3.0 , < 6.5.4 (semver) Unknown: 7.0.0 , < 7.1.3 (semver) |
Date Public
2026-09-29 20:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102489",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-10-02",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384 Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-10T03:55:20.097Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Linux",
"Docker"
],
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"lessThan": "6.3.0",
"status": "unknown",
"version": "*",
"versionType": "semver"
},
{
"lessThan": "6.5.4",
"status": "affected",
"version": "6.3.0",
"versionType": "semver"
},
{
"lessThan": "7.1.3",
"status": "unknown",
"version": "7.0.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Earth Grob (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Luke Paris (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Tijmen van der Spijk (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Zohar Cochavi (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Alje Woltjer (Merlon Security)"
},
{
"lang": "en",
"type": "finder",
"value": "Mischa Rick van Geelen (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Ralph Horn (DIVD)"
},
{
"lang": "en",
"type": "finder",
"value": "Max van der Horst (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Victor Pasman (DIVD)"
},
{
"lang": "en",
"type": "analyst",
"value": "Frank Breedijk (DIVD)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zammad"
}
],
"datePublic": "2026-09-29T20:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework."
}
],
"value": "Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "ATTACKED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "CONCENTRATED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Chained with CVE-2026-102490"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T09:10:59.656Z",
"orgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"shortName": "DIVD"
},
"references": [
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/DIVD-2026-00015"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://csirt.divd.nl/CVE-2026-102489"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://zammad.com/en/advisories/cve-2026-102489-cve-2026-102490"
},
{
"tags": [
"technical-description"
],
"url": "https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2"
}
],
"source": {
"advisory": "DIVD-2026-00015",
"discovery": "INTERNAL"
},
"tags": [
"unsupported-when-assigned",
"x_known-exploited-vulnerability",
"x_open-source"
],
"title": "Undisclosed RCE in Zammad v6.3 and higher",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "b87402ff-ae37-4194-9dae-31abdbd6f217",
"assignerShortName": "DIVD",
"cveId": "CVE-2026-102489",
"datePublished": "2026-09-30T16:21:19.937Z",
"dateReserved": "2026-09-29T09:46:12.490Z",
"dateUpdated": "2026-10-19T09:10:59.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2019-1010018 (GCVE-0-2019-1010018)
Vulnerability from cvelistv5 – Published: 2019-07-16 12:35 – Updated: 2024-08-05 03:07
VLAI
EPSS
VEX
Summary
Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.
Severity
No CVSS data available.
CWE
- CWE-80 - Cross Site Scripting (XSS) - CWE-80
References
3 references
| URL | Tags |
|---|---|
| https://github.com/zammad/zammad/compare/ea50d0c.… | x_refsource_MISC |
| https://github.com/zammad/zammad/compare/5c983f6.… | x_refsource_MISC |
| https://github.com/zammad/zammad/issues/1869 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Zammad GmbH | Zammad |
Affected:
≤ 2.3.0 [fixed: 2.3.1
Affected: 2.2.2 and 2.1.3] |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:07:18.312Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/zammad/zammad/issues/1869"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Zammad",
"vendor": "Zammad GmbH",
"versions": [
{
"status": "affected",
"version": "\u2264 2.3.0 [fixed: 2.3.1"
},
{
"status": "affected",
"version": "2.2.2 and 2.1.3]"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-80",
"description": "Cross Site Scripting (XSS) - CWE-80",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-07-16T12:35:14.000Z",
"orgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"shortName": "dwf"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zammad/zammad/issues/1869"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"ID": "CVE-2019-1010018",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Zammad",
"version": {
"version_data": [
{
"version_value": "\u2264 2.3.0 [fixed: 2.3.1"
},
{
"version_value": "2.2.2 and 2.1.3]"
}
]
}
}
]
},
"vendor_name": "Zammad GmbH"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross Site Scripting (XSS) - CWE-80"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/zammad/zammad/compare/ea50d0c...238784d",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/compare/ea50d0c...238784d"
},
{
"name": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d"
},
{
"name": "https://github.com/zammad/zammad/issues/1869",
"refsource": "MISC",
"url": "https://github.com/zammad/zammad/issues/1869"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7556d962-6fb7-411e-85fa-6cd62f095ba8",
"assignerShortName": "dwf",
"cveId": "CVE-2019-1010018",
"datePublished": "2019-07-16T12:35:14.000Z",
"dateReserved": "2019-03-20T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:07:18.312Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}