CVE-2021-21435

—

CVSS 3.1

6.5 medium

EPSS

1%p68

Published

Feb 8, 2021 (Feb 8, 2021)

Modified

Jun 17, 2026

Description

Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.

Vendors: otrs
Products: otrs
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.