Zammad is exposed to an input validation flaw that allows malicious HTML content to be injected into ticket bodies. A crafted ticket containing a logout trigger element can be viewed by other users; the element then initiates a logout request that terminates the viewer’s session. This flaw enables attackers to forcibly log out users, disrupting service availability and potentially facilitating further attacks, particularly if user sessions hold privileged access.

The vulnerability affects Zammad helpdesk versions before 7.0.2. The issue was resolved in release 7.0.2; any deployment running an earlier version remains vulnerable. The affected product is Zammad, a web‑based open source helpdesk system.

With a CVSS score of 5.3, the flaw is considered a medium‑severity vulnerability. The EPSS score is not available, so the likelihood of exploitation in the wild is currently unclear, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need the ability to create or modify ticket content, which typically requires authenticated user privileges. The impacted user’s view triggers a request that logs them out, making the compromise largely limited to session termination and potential denial of service to individual users.