Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an attacker to formulate more precise attacks. Source code was disclosed for the file 404.html (/zammad/public/404.html)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zammad 信息泄露漏洞
Vulnerability Description
Zammad是德国Zammad公司的一套票务管理软件。 Zammad 3.0版本至3.2版本中存在安全漏洞。攻击者可利用该漏洞获取静态资源的源码。
CVSS Information
N/A
Vulnerability Type
N/A