Unrated
An issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution because deserialization is mishandled.
CVE-2021-42090
First seen on SecPulse
References
- advisory zammad.com