CVE-2021-21440: Otrs

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.

Affected products

• Otrs Otrs: from 6.0.0, up to and including 6.0.1; from 7.0.0, up to and including 7.0.27; from 8.0.0, up to and including 8.0.14

Published 2021-07-26. Last modified 2026-06-17.