Lucene search
PRIOn knowledge basePRION:CVE-2016-6848HistoryDec 15, 2016 - 6:59 a.m.
Design/Logic Flaw
2016-12-1506:59:00
PRIOn knowledge base
www.prio-n.com
2
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used to inject, generate and download executable files to the client (“Reflected File Download”). Malicious platform specific (e.g. Microsoft Windows) batch file can be created via a trusted domain without authentication that, if executed by the user, may lead to local code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| open-xchange_appsuite | le | 7.8.2 |
Related
cve
cve
CVE-2016-6848
2016-12-15 06:59:20
nvd
nvd
CVE-2016-6848
2016-12-15 06:59:20
cvelist
cvelist
CVE-2016-6848
2016-12-15 06:31:00
openvas
openvas
Open-Xchange (OX) App Suite Multiple Vulnerabilities -01 (Jan 2017)
2017-01-02 00:00:00