CVE-2021-21438 FAQ articles are shown to users without permission

2021-03-2200:00:00

CWE-264

OTRS

raw.githubusercontent.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.