CVE-2021-21434: Otrs Survey

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.

Affected products

• Otrs Survey: from 6.0.0, up to and including 6.0.20; from 7.0.0, up to and including 7.0.19

Published 2021-02-08. Last modified 2026-06-17.