Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2021-36100

Authenticated remote code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Specially crafted string in OTRS system configuration can allow the execution of any system command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRS

  • 8.0.x to ≤ 8.0.19affected
  • 7.0.x to ≤ 7.0.32affected

OTRS AG SystemMonitoring

  • 7.0.x to ≤ 7.0.18affected
  • 8.0.x to ≤ 8.0.8affected
  • 6.0.1 to < 6.0.x*affected

OTRS AG OTRSSTORM

  • 7.0.x to ≤ 7.0.27affected
  • 8.0.x to ≤ 8.0.11affected
  • 6.0.1 to < 6.0.x*affected

OTRS AG ((OTRS)) Community Edition

  • 6.0.1 to < 6.0.x*affected

References