CVE-2020-10105
05.03.2020, 01:15
An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html (/zammad/public/404.html)Enginsight
| Vendor | Product | Version |
|---|---|---|
| zammad | zammad | 1.0.0 ≤ 𝑥 ≤ 3.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration