CVE-2021-27557: Easycorp Zentao

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job.

Affected products

• Easycorp Zentao: version 12.5.3 only

Published 2021-08-31. Last modified 2026-06-17.