CVE-2020-15003

2020-10-2304:54:27

mitre

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).

References

seclists.org/fulldisclosure/2020/Oct/20

www.open-xchange.com/