Zammad: Stored XSS in ticket article rendering in the new Vue-based interface

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket interface can render ticket article content without the expected output encoding. An authenticated user can store markup in an article that is interpreted when another user views the ticket, enabling stored cross-site scripting. The default Content Security Policy limits practical impact, and the classic REST/CoffeeScript interface is not affected. This issue is fixed in version 7.1.2.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…zammad/security/advisories/GHSA-4x3x-65c5-8hx4 Diğer
• github.com/…ommit/fe8fb9bd6c61f9136c93ef00cc08904bca0edecc Diğer

Kayıt geçmişi

1. 4 Kas 2026 21:59Yayımlandı

İlgili açıklar

• 5,3 CVE-2026-103022Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)
• 9,4 CVE-2026-102530JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL
• 6,3 CVE-2026-55649GeoNode has Stored XSS in Documents metadata abstract field
• 7,6 CVE-2026-62346Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML
• 7,6 CVE-2026-62345Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)
• 8,8 CVE-2026-118670OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document