CVE-2020-12645

2020-08-3114:28:16

mitre

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

64.7%

JSON

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.

References

seclists.org/fulldisclosure/2020/Aug/14

www.open-xchange.com/