Posts

How Zammad’s brand-new AI Agent feature routed admin-controlled input into an ERB template rendered with trusted: true, yielding remote code execution as the application user.

A webhook endpoint that accepted internal IPs with no range validation, turned into a clean data-exfiltration primitive by Zammad’s own HTTP logs.

A one-scheme gap in Zammad’s link sanitizer let a data:text/html anchor survive into stored ticket articles — a stored phishing primitive delivered through inbound email.