CVE-2021-42137

—

CVSS 3.1

5.3 medium

EPSS

<1%p56

Published

Oct 11, 2021 (Oct 11, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the privilege requirement for viewing a list of tickets that shows title, state, etc.

Vendors: zammad
Products: zammad
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.