CVE-2016-6852

Опубликовано: 15 дек. 2016

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware server to prepare further attacks.

Ссылки

http://www.securityfocus.com/bid/93459
Third Party Advisory
VDB Entry
https://software.open-xchange.com/OX6/6.22/doc/Release_Notes_for_Patch_Release_3522_7.8.2_2016-08-29.pdf
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/93459
Third Party Advisory
VDB Entry
https://software.open-xchange.com/OX6/6.22/doc/Release_Notes_for_Patch_Release_3522_7.8.2_2016-08-29.pdf
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open-xchange:open-xchange_appsuite:*:rev4:*:*:*:*:*:*

Версия до 7.8.2 (включая)

EPSS

Процентиль: 44%

0.0022

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-mhf5-8qr3-gfp3

CVSS3: 4.3

github

больше 3 лет назад

EPSS

Процентиль: 44%

0.0022

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200