| Package | Affected versions | Patched versions |
|---|---|---|
| zammad | = 6.1.0= 6.2.0 |
An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free