Lutfu

Name of the Vulnerable Software and Affected Versions: Zammad versions 1.0.x through 4.0.0 Description: The issue allows remote attackers to manipulate users into visiting the attackers' page through text injection or content spoofing in the 404 page. Recommendations: For Zammad versions 1.0.x through 4.0.0, consider restricting access to the 404 page until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.