CVE-2021-42090

CRITICAL CVSS: 9.8 Published: 2021-10-07 Modified: 2026-06-17

Description

An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled.

Affected Platforms

Zammad Zammad

Weakness Type

CWE-502

References