CVE-2018-1000154

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page (CWE-80) vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser. This attack appear to be exploitable via the victim openning a ticket. This vulnerability appears to have been fixed in 2.3.1, 2.2.2 and 2.1.3.

• CWE-79

• https://github.com/zammad/zammad/issues/1869Third Party Advisory
• https://zammad.com/news/release-2-4Vendor Advisory
• https://zammad.com/news/security-advisory-zaa-2018-01Vendor Advisory
• https://github.com/zammad/zammad/issues/1869Third Party Advisory
• https://zammad.com/news/release-2-4Vendor Advisory
• https://zammad.com/news/security-advisory-zaa-2018-01Vendor Advisory

Published

Apr 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000148An exposure of sensitive information vulnerability exists in…
• CVE-2018-1000149A man in the middle vulnerability exists in Jenkins Ansible …
• CVE-2018-1000150An exposure of sensitive information vulnerability exists in…
• CVE-2018-1000151A man in the middle vulnerability exists in Jenkins vSphere …
• CVE-2018-1000152An improper authorization vulnerability exists in Jenkins vS…
• CVE-2018-1000153A cross-site request forgery vulnerability exists in Jenkins…
• CVE-2018-1000155OpenFlow version 1.0 onwards contains a Denial of Service an…
• CVE-2018-1000156GNU Patch version 2.7.6 contains an input validation vulnera…
• CVE-2018-1000157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000158cmsmadesimple version 2.2.7 contains a Incorrect Access Cont…
• CVE-2018-1000159tlslite-ng version 0.7.3 and earlier, since commit d7b288316…
• CVE-2018-1000160RisingStack protect version 1.2.0 and earlier contains a Cro…