Command injection

2022-07-2714:15:00

PRIOn knowledge base

www.prio-n.com

ox app suite

command injection

documentconverter

email attachment

security vulnerability

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).

CPENameOperatorVersion
ox_app_suitele7.10.6

CPE	Name	Operator	Version
	ox_app_suite	le	7.10.6

References

open-xchange.com

seclists.org/fulldisclosure/2022/Jul/11