CVE-2020-10096

CVE-2020-10096 affects Zammad 3.0–3.2 and involves a failure to prevent caching of confidential data in browser memory. An attacker who remotely compromises or physically gains access to a user’s workstation can read sensitive information from the browser cache without authenticating to the appli...