CVE-2021-42087

CVE-2021-42087 affects Zammad before 4.1.1, allowing an admin to discover the application secret via the API. Public descriptions in multiple sources corroborate that versions prior to 4.1.1 are vulnerable to secret disclosure and sensitive information exposure through the API. Remediation is to ...