CVE-2021-28093

Опубликовано: 30 июл. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32.

Конфигурация 1

Одно из

cpe:2.3:a:open-xchange:open-xchange_documents:*:*:*:*:*:*:*:*

Версия до 7.10.5 (исключая)

cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:-:*:*:*:*:*:*

cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision1:*:*:*:*:*:*

cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision2:*:*:*:*:*:*

cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision3:*:*:*:*:*:*

cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision4:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00134

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

CWE-326

GHSA-5gch-mm6f-cv27