CVE-2021-21443

—

CVSS 3.1

4.3 medium

EPSS

<1%p55

Published

Jul 26, 2021 (Jul 26, 2021)

Modified

Jun 17, 2026

Description

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.

Vendors: otrs
Products: otrs
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.