CVE-2021-36100: Otrs

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Specially crafted string in OTRS system configuration can allow the execution of any system command.

Affected products

• Otrs Otrs: before 7.0.28 (fixed in 7.0.28); from 7.0.30, before 7.0.33 (fixed in 7.0.33); from 8.0.0, before 8.0.21 (fixed in 8.0.21)
• Otrs Otrs Itsm: before 7.0.19 (fixed in 7.0.19); from 8.0.0, before 8.0.28 (fixed in 8.0.28)
• Otrs Otrs Storm: before 8.0.12 (fixed in 8.0.12)

Published 2022-03-21. Last modified 2026-06-17.