CVE-2021-36091

MEDIUM 4.3CVE-2021-36091 · Published 26/07/2021 · updated 17/06/2026

In short

CVE-2021-36091 is a MEDIUM (CVSS 4.3) vulnerability affecting otrs (otrs).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.1% of all vulnerabilities.
Fix: update to 6.0.32, 7.0.28 or later.

Package	Affected versions	Patched versions
otrs otrs	`≥ 6.0.0, < 6.0.32≥ 7.0.0, < 7.0.28`	`6.0.327.0.28`

Description

Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.

References

lists.debian.org/debian-lts-announce/2023/08/msg00040.html
otrs.com/release-notes/otrs-security-advisory-2021-14 · Vendor Advisory

More vulnerabilities in otrs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

otrs

≥ 6.0.0, < 6.0.32≥ 7.0.0, < 7.0.28

6.0.327.0.28

More vulnerabilities in otrs

See all →