zammad.

Zammad: Stored XSS in ticket article rendering in the new Vue-based interface

• zammad
• Cross-site scripting (XSS)
• CWE-116

Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

• Zammad
• Privilege escalation

Undisclosed RCE in Zammad v6.3 and higher

• Zammad
• Authentication bypass

Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens

• zammad
• Information disclosure
• CWE-116

Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset

• zammad
• Path traversal

Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets

• zammad
• Broken access control

Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail

• zammad
• Weak cryptography or TLS

Zammad: Missing rate limiting allows password brute-forcing during two-factor login

• zammad
• Information disclosure
• Authentication bypass

Zammad: Sensitive Information Exposure in Integration Administration API

• zammad
• Information disclosure
• Hard-coded credentials

Zammad: S/MIME signature verification allows forged sender impersonation

• zammad
• Authentication bypass
• Weak cryptography or TLS

Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

• zammad
• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)

Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

• zammad
• Information disclosure
• Broken access control

Zammad: Stored XSS via unescaped option labels in the object attribute options context UI

• zammad
• Cross-site scripting (XSS)

Zammad: Account takeover via unverified email matching during SSO auto-link

• zammad
• Authentication bypass

Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration

• zammad
• Broken access control

Zammad: Remote image tracking bypass via shortened URL scheme

• zammad
• CWE-20
• CWE-184

Zammad: Channel admins can read unauthorized attachments via signature rich-text body

• zammad
• Broken access control

Zammad: AI Agent template sanitizer bypass leads to remote code execution

• zammad
• Code injection
• CWE-20

Zammad: Pending upload deletion bypass via legacy attachment endpoint

• zammad
• Broken access control

Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller

• zammad
• Path traversal

Zammad: Cross-User Taskbar Item Access Control Vulnerability

• zammad
• Information disclosure
• Broken access control

Zammad: Denial of Service via OTRS Import Controller

• zammad
• Authentication bypass
• Denial of service

Zammad: Malicious input in Ticket Body Enables Session Termination

• zammad
• Cross-site request forgery (CSRF)
• CWE-20

Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers

• zammad
• Broken access control

Zammad: Incorrect Authorization and Improper Privilege Management

• zammad
• Privilege escalation
• Broken access control

Zammad: Cross-Site Scripting in Ticket Notifications

• zammad
• Cross-site scripting (XSS)

Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad

• zammad
• CWE-82

Zammad: PGP signature spoofing via unvalidated verification return

• zammad
• Authentication bypass
• Weak cryptography or TLS

Zammad: Avatar Image URL Server-Side Request Forwarding

• zammad
• Server-side request forgery (SSRF)

Zammad: Missing authorization check in GitHub + GitLab integration allows cross-ticket data leak

• zammad
• Broken access control

Zammad: Titles of knowledge base answers will be shown across all categories via the global search

• zammad
• Information disclosure
• Broken access control

Zammad: Missing authorization on ticket attachment download

• zammad
• Broken access control

Zammad: Incorrect implementation of permission checks in the knowledge base module

• zammad
• Broken access control

Zammad 7.0.1 - Improper authorization in ticket article attachment cloning

• Zammad
• Broken access control

Zammad is miissing authorization in AI assistance controller for context data used in text tools

• zammad
• Broken access control

Zammad has improper access control in AI assistance controller for text tools

• zammad
• Broken access control

Zammad has a server-side template injection leading to RCE via AI Agent

• zammad
• Code injection

Zammad has incorrect access control in getting_started_controller

• zammad
• Broken access control

Zammad is missing authorization in ticket create endpoint

• zammad
• Broken access control

Zammad has Cross-site request forgery (CSRF) in OAuth callback endpoints

• zammad
• Cross-site request forgery (CSRF)

Zammad has an origin validation error in SSO mechanism

• zammad
• CWE-346

Zammad has a Server-side request forgery (SSRF) via webhooks

• zammad
• Server-side request forgery (SSRF)

Zammad improperly neutralizes of script-related HTML tags in ticket articles

• zammad
• Cross-site scripting (XSS)

Zammad has an information disclosure in ticket detail view of customers in shared organizations

• zammad
• Broken access control

In Zammad 6.4.x before 6.4.2, there is information exposure.

• Zammad
• CWE-402

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.

• Zammad
• CWE-602

Server-side request forgery in Zammad

• Zammad
• Server-side request forgery (SSRF)

Authentication bypass in Zammad

• Zammad
• Authentication bypass

Cross-site scripting in Zammad

• Zammad
• Cross-site scripting (XSS)