Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Advisory: OX App Suite — documentation.open-xchange.com/appsuite/security/advisories… Clear all filters
TI-2023-11584 CVE-2023-26436 · GHSA-5xxc-86g5-876q

Code injection in Open-Xchange GmbH OX App Suite

Priority MEDIUM 41

Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01252 Published 2023-06-20 No fix listed CWE-94
TI-2023-11583 CVE-2023-26435 · GHSA-qg93-cpf3-386g

Server-side request forgery in Open-Xchange GmbH OX App Suite

Priority LOW 24

It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00782 Published 2023-06-20 No fix listed CWE-918
TI-2023-11576 CVE-2023-26428 · GHSA-qv8q-wwpq-485r

Authorization bypass in Open-Xchange GmbH OX App Suite

Priority LOW 31

Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00981 Published 2023-06-20 No fix listed CWE-639