What is the severity of CVE-2021-21434?

The severity of CVE-2021-21434 is medium, with a severity value of 4.8.

How does CVE-2021-21434 affect OTRS AG Survey?

CVE-2021-21434 affects OTRS AG Survey 6.0.x version 6.0.20 and prior versions, as well as 7.0.x version 7.0.19 and prior versions.

How can the vulnerability be exploited?

The vulnerability can be exploited by a survey administrator crafting a survey in such a way that malicious code can be executed in the agent interface.

Is there a fix available for CVE-2021-21434?

Yes, a fix is available for CVE-2021-21434. Users should update to OTRS AG Survey version 6.0.21 or version 7.0.20 to mitigate the vulnerability.

Vulnerability/
CVE-2021-21434

medium

4.8

CWE

8/2/2021

17/9/2024

CVE-2021-21434: XSS in Survey Module

Q: What is CVE-2021-21434?

CVE-2021-21434 is a vulnerability that allows a survey administrator to craft a survey in such a way that malicious code can be executed in the agent interface, affecting OTRS AG Survey 6.0.x version 6.0.20 and prior versions, and 7.0.x version 7.0.19 and prior versions.

First published: Mon Feb 08 2021(Updated: )

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.

Credit: security@otrs.com

Affected Software	Affected Version	How to fix
OTRS Survey	>=6.0.0<=6.0.20
OTRS Survey	>=7.0.0<=7.0.19

Remedy

Upgrade to Survey 7.0.20.

Never miss a vulnerability like this again

Reference Links

https://otrs.com/release-notes/otrs-security-advisory-2021-01/

Frequently Asked Questions

What is CVE-2021-21434?
CVE-2021-21434 is a vulnerability that allows a survey administrator to craft a survey in such a way that malicious code can be executed in the agent interface, affecting OTRS AG Survey 6.0.x version 6.0.20 and prior versions, and 7.0.x version 7.0.19 and prior versions.
What is the severity of CVE-2021-21434?
The severity of CVE-2021-21434 is medium, with a severity value of 4.8.
How does CVE-2021-21434 affect OTRS AG Survey?
CVE-2021-21434 affects OTRS AG Survey 6.0.x version 6.0.20 and prior versions, as well as 7.0.x version 7.0.19 and prior versions.
How can the vulnerability be exploited?
The vulnerability can be exploited by a survey administrator crafting a survey in such a way that malicious code can be executed in the agent interface.
Is there a fix available for CVE-2021-21434?
Yes, a fix is available for CVE-2021-21434. Users should update to OTRS AG Survey version 6.0.21 or version 7.0.20 to mitigate the vulnerability.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/title
agent/weakness
agent/last-modified-date
agent/references
agent/remedy
agent/severity
agent/author
agent/description
agent/first-publish-date
agent/event
agent/tags
vendor/otrs
canonical/otrs survey
version/otrs survey/6.0.0
version/otrs survey/6.0.20
version/otrs survey/7.0.0
version/otrs survey/7.0.19

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.