CVE-2021-42091: SSRF
Published Oct 7, 2021
·Updated
An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.
Affected Software
1 affected component
Zammad Zammad<4.1.1
Event History
Oct 7, 2021
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42091?
The severity of CVE-2021-42091 is critical with a CVSS score of 9.1.
2
How does CVE-2021-42091 affect Zammad?
CVE-2021-42091 affects Zammad versions up to and including 4.1.1.
3
What is SSRF?
SSRF stands for Server-Side Request Forgery.
4
How does SSRF occur in Zammad with GitHub or GitLab integration?
SSRF can occur in Zammad before version 4.1.1 when using GitHub or GitLab integration.
5
Is there a fix for CVE-2021-42091?
Yes, the fix for CVE-2021-42091 is to update Zammad to version 4.1.1 or later.