CVE-2019-1010018 - AskarLabs CVE Database

CVE-2019-1010018

Vendor Zammad Gmbh

Product Zammad

Weakness CWE-80 · XSS · basic

Published July 16, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.

Key dates

02Disclosure timeline

July 16, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-1010018 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/80.html

Related vulnerabilities

04Related CVE

CVE-2024-49337 IBM OpenPages HTML injection CVE-2017-20089 Gwolle Guestbook Plugin cross site scriting CVE-2025-8621 Mosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter CVE-2025-63068 WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability CVE-2025-12803 Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode

Identifiers

CVE CVE-2019-1010018

CWE CWE-80

Affected versions

Vendor Zammad Gmbh

Product Zammad

Affected ≤ 2.3.0 [fixed: 2.3.1

Vendor Zammad Gmbh

Product Zammad

Affected 2.2.2 and 2.1.3]