CVE-2021-35391: Deskpro

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL.

Affected products

  • Deskpro Deskpro: version 2021.21.6 only

Published 2023-07-21. Last modified 2026-07-09.