| Package | Affected versions | Patched versions |
|---|---|---|
| zammad | = 1.1.0= 1.1.1= 1.1.2= 1.2.0≤ 1.0.3 |
An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened in a new tab instead of getting downloaded. This creates an attack vector of executing code in the domain of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free