CVE-2021-42085

2021-10-0721:15:07

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.

CPENameOperatorVersion
zammadeq1.6.1
zammadeq2.10.0
zammadeq1.6.0
zammadeq4.1.0
zammadeq3.7.0

Name	Operator	Version
zammad	eq	1.6.1
zammad	eq	2.10.0
zammad	eq	1.6.0
zammad	eq	4.1.0
zammad	eq	3.7.0

References

zammad.com/en/advisories/zaa-2021-17