CVE-2021-35303

概要

参考情報

• zammad.com/en/advisories/zaa-2021-06 · Vendor Advisory

zammad のその他の脆弱性

• CVE-2026-102490高 7.8悪用確認済み（CISA KEV）Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the…
• CVE-2026-102489緊急 9.8悪用確認済み（CISA KEV）Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug…
• CVE-2026-34837中 4.3Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, he REST endpoint POST /api/v1/ai_assistance/text_tools/:…
• CVE-2026-34782中 4.3Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/ai_assistance/t…
• CVE-2026-34724高 7.2Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which le…