Lucene search

K
cvelistMitreCVELIST:CVE-2018-5756
HistoryJun 15, 2018 - 9:00 p.m.

CVE-2018-5756

2018-06-1521:00:00
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 does not properly check for folder-to-object association, which allows remote authenticated users to delete arbitrary tasks via the task id in a delete action to api/tasks.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%