Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.8
CVSSv3

CVE-2021-28095

Published: 30/07/2021 Updated: 12/07/2022
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 4.8 | Impact Score: 2.5 | Exploitability Score: 2.2
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

OX Documents prior to 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

open-xchange open-xchange documents 7.10.5

open-xchange open-xchange documents

Mailing Lists

Full Disclosure: Open-Xchange Security Advisory 2021-07-19
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities Feel free to join our bug bounty programs for OX AppSuite, Dovecot and PowerDNS at HackerOne Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX Documents Vendor: OX Software GmbH ...

References

CWE-326http://packetstormsecurity.com/files/163569/OX-Documents-7.10.5-Improper-Authorization.htmlhttp://seclists.org/fulldisclosure/2021/Jul/37https://www.open-xchange.comhttps://nvd.nist.govhttp://seclists.org/fulldisclosure/2021/Jul/37
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of serviceCVE-2024-27371CVE-2024-20405CVE-2024-31627CVE-2024-31625race conditionCVE-2024-4358cross-site scriptingCVE-2023-20938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook