Skip to content
OpenAdvisories
Unscored CVE-2020-10101 EUVD-2020-2566GHSA-85q9-82qf-837m

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. T…

Published Mar 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors not handled. This leads to a crash of the service process.

References