Security Advisory

CVE-2020-10105

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-05 00:36:55

Last updated 2024-08-04 10:50:57

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html (/zammad/public/404.html)

← Browse all CVEs View on cve.org ↗