CVE-2021-43145: Zammad

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.

Affected products

• Zammad Zammad: version 5.0.1 only

Published 2022-02-04. Last modified 2026-06-17.