Zammad 5.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:zammad:zammad:5.1.0:*:*:*:*:*:*:*

part: a version: 5.1.0 update: *

VendorZammad (c4a18e0f-7b9e-5129-8049-726b820feeed)
ProductZammad (9e29b17c-6410-5005-8a60-aa1ce52c8044)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/zammad/zammad purl2cpe 2026-06-01 10:16:54.944465

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29701 vulnerable 2026-06-08 05:42:48.761093 Details available
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
Published: 2022-04-27T02:47:11.000Z
Updated: 2024-08-03T06:33:41.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29700 vulnerable 2026-06-08 05:42:48.760698 Details available
A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification.
Published: 2022-04-27T02:47:13.000Z
Updated: 2024-08-03T06:33:41.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.