Vulnerabilities

TI-2023-19988 CVE-2023-38617 · GHSA-jcpg-g29x-4qwp

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected…

MEDIUM 60

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the filter parameter at /api?path=files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2023-07-20 No fix listed CWE-79

TI-2023-19186 CVE-2023-37601 · GHSA-6gxg-hj4j-68q6

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI)…

HIGH 72

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI) vulnerability via the component /etc/hosts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01207 Published 2023-07-20 No fix listed CWE-22

TI-2023-19185 CVE-2023-37600 · GHSA-pf8q-3hqq-7vj4

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected…

MEDIUM 60

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /api?path=profile.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2023-07-20 No fix listed CWE-79

Vulnerabilities

Filters

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected…

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI)…

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected…