critical9.8
CVE-2021-42090
An issue was discovered in Zammad before 4.1.1.
Impact
An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zammad | Zammad | before 4.1.1 |