CVE-2021-42090

Zammad before 4.1.1 contains a remote code execution vulnerability due to mishandled deserialization in the Form functionality. The issue allows an attacker to execute arbitrary code on affected systems. Affected product/version: Zammad prior to 4.1.1 (open-source web-based help desk). Root cause...