CVE-2020-10104

CVE-2020-10104 is a medium-severity information disclosure vulnerability affecting Zammad versions 3.0 through 3.2. Authenticated users can access a specific URL that inadvertently returns hashed passwords, potentially allowing an attacker to gain unauthorized access to user accounts. The vulnerability has a CVSS score of 4.3 (Medium) due to its low attack complexity and the potential for sensitive information exposure, though it requires prior authentication. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.