exploitDog

CVE-2021-38376

Опубликовано: 22 нояб. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.

Ссылки

http://packetstormsecurity.com/files/165038/OX-App-Suite-7.10.5-Cross-Site-Scripting-Information-Disclosure.html
Exploit
Third Party Advisory
https://seclists.org/fulldisclosure/2021/Nov/43
Exploit
Mailing List
Third Party Advisory
https://www.open-xchange.com
Product
http://packetstormsecurity.com/files/165038/OX-App-Suite-7.10.5-Cross-Site-Scripting-Information-Disclosure.html
Exploit
Third Party Advisory
https://seclists.org/fulldisclosure/2021/Nov/43
Exploit
Mailing List
Third Party Advisory
https://www.open-xchange.com
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open-xchange:ox_app_suite:*:*:*:*:*:*:*:*

Версия до 7.10.5 (включая)

EPSS

Процентиль: 50%

0.00268

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-v583-7m9j-97cw

CVSS3: 5.3

github

больше 3 лет назад

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.

EPSS

Процентиль: 50%

0.00268

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287