Path traversal

2020-01-3122:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%

JSON

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.

CPENameOperatorVersion
open-xchange_appsuitele7.4.1
open-xchange_appsuiteeq7.6.0
open-xchange_appsuiteeq7.4.2
open-xchange_appsuiteeq7.6.0 revision2
open-xchange_appsuiteeq7.6.0 revision3
open-xchange_appsuiteeq7.6.0 revision4
open-xchange_appsuiteeq7.6.0 revision5
open-xchange_appsuiteeq7.6.0 revision6
open-xchange_appsuiteeq7.6.0 revision7
open-xchange_appsuiteeq7.6.0 revision8

Name	Operator	Version
open-xchange_appsuite	le	7.4.1
open-xchange_appsuite	eq	7.6.0
open-xchange_appsuite	eq	7.4.2
open-xchange_appsuite	eq	7.6.0 revision2
open-xchange_appsuite	eq	7.6.0 revision3
open-xchange_appsuite	eq	7.6.0 revision4
open-xchange_appsuite	eq	7.6.0 revision5
open-xchange_appsuite	eq	7.6.0 revision6
open-xchange_appsuite	eq	7.6.0 revision7
open-xchange_appsuite	eq	7.6.0 revision8