NetSight
medium6.4

CVE-2021-36100

Specially crafted string in OTRS system configuration can allow the execution of any system command.

Impact

Specially crafted string in OTRS system configuration can allow the execution of any system command.

Affected products

VendorProductAffected versions
OtrsOtrs
before 7.0.28
from 7.0.30 before 7.0.33
from 8.0.0 before 8.0.21
OtrsOtrs Itsm
before 7.0.19
from 8.0.0 before 8.0.28
OtrsOtrs Storm
before 8.0.12

Weakness classification

References