exploitDog

CVE-2020-12645

Опубликовано: 31 авг. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.

Ссылки

https://seclists.org/fulldisclosure/2020/Aug/14
Mailing List
Third Party Advisory
https://www.open-xchange.com/
Vendor Advisory
https://seclists.org/fulldisclosure/2020/Aug/14
Mailing List
Third Party Advisory
https://www.open-xchange.com/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*

Версия от 7.10.1 (включая) до 7.10.3 (включая)

EPSS

Процентиль: 56%

0.0034

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-307

Связанные уязвимости

GHSA-9753-9pqh-vm76

github

больше 3 лет назад

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption.

EPSS

Процентиль: 56%

0.0034

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-307