CVE-2021-42087

2021-10-0721:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

An issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the API.

CPENameOperatorVersion
zammadeq1.6.1
zammadeq2.10.0
zammadeq1.6.0
zammadeq4.1.0
zammadeq3.7.0

Name	Operator	Version
zammad	eq	1.6.1
zammad	eq	2.10.0
zammad	eq	1.6.0
zammad	eq	4.1.0
zammad	eq	3.7.0

References

zammad.com/en/advisories/zaa-2021-15