CVE-2021-36100
21.03.2022, 10:15
Specially crafted string in OTRS system configuration can allow the execution of any system command.
| Vendor | Product | Version |
|---|---|---|
| otrs | otrs | 𝑥 < 7.0.28 |
| otrs | otrs | 7.0.30 ≤ 𝑥 < 7.0.33 |
| otrs | otrs | 8.0.0 ≤ 𝑥 < 8.0.21 |
| otrs | otrs_itsm | 𝑥 < 7.0.19 |
| otrs | otrs_itsm | 8.0.0 ≤ 𝑥 < 8.0.28 |
| otrs | otrs_storm | 𝑥 < 8.0.12 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases