CVE-2021-28095

CVE-2021-28095

EPSS 0.9%

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://packetstormsecurity.com/files/163569/OX-Documents-7.10.5-Improper-Authorization.html http://seclists.org/fulldisclosure/2021/Jul/37 https://www.open-xchange.com