CVE-2021-42085: XSS
Published Oct 7, 2021
·Updated
An issue was discovered in Zammad before 4.1.1. There is stored XSS via a custom Avatar.
Affected Software
1 affected component
Zammad Zammad<4.1.1
Event History
Oct 7, 2021
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-42085.
2
What is the severity level of CVE-2021-42085?
The severity level of CVE-2021-42085 is medium (5.4).
3
What is the affected software?
The affected software is Zammad before version 4.1.1.
4
How does the vulnerability occur?
The vulnerability occurs through stored XSS via a custom Avatar.
5
Is there a fix available for CVE-2021-42085?
Yes, the fix for CVE-2021-42085 is available in Zammad version 4.1.1.