CVE-2021-21438

No fix known EPSS <1%CVSS 3.5

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.

Published 2021-03-22 · CVE record · OSV

Products: OTRS AG FAQ, OTRS AG OTRS