CVE-2021-36097

CVE-2021-36097 affects OTRS AG OTRS 8.0.x (up to 8.0.16). The issue allows agents to lock a ticket without the required Owner permission and then move it to a queue where they have rw rights, effectively granting full control. The publicly documented details come from sources including PT-2021-21...