CVE-2020-10101
05.03.2020, 01:15
An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process.Enginsight
| Vendor | Product | Version |
|---|---|---|
| zammad | zammad | 1.0.0 ≤ 𝑥 ≤ 3.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration