Specially crafted string in OTRS system configuration can allow the execution of any system command.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-36100.json"
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.28"
}
]
},
{
"events": [
{
"introduced": "7.0.30"
},
{
"fixed": "7.0.33"
}
]
},
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0.19"
}
]
},
{
"events": [
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.12"
}
]
}
]