CVE-2021-36095

—

CVSS 3.1

5.3 medium

EPSS

<1%p59

Published

Sep 6, 2021 (Sep 6, 2021)

Modified

Jun 17, 2026

Description

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

Vendors: otrs
Products: otrs
Weakness: CWE-200, CWE-640
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.