CVE-2021-35300

Medium

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the…

mitre·CWE-1021·Published 2021-06-28

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

155 chars

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.

NVDen

155 chars

Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.

Una Inyección de texto / de Suplantación de Contenido en la página 404 en Zammad versiones 1.0.x hasta 4.0.0, podría permitir a atacantes remotos manipular a los usuarios para que visiten la página de los atacantes

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N