Server side request forgery (ssrf)

2021-07-2217:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.7%

JSON

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

CPENameOperatorVersion
open-xchange_appsuiteeq7.10.3 rev1
open-xchange_appsuiteeq7.10.3 rev2
open-xchange_appsuiteeq7.10.3 rev3
open-xchange_appsuiteeq7.10.3 rev4
open-xchange_appsuiteeq7.10.3 rev5
open-xchange_appsuiteeq7.10.3 rev6
open-xchange_appsuiteeq7.10.3
open-xchange_appsuiteeq7.10.3 rev18
open-xchange_appsuiteeq7.10.3 rev19
open-xchange_appsuiteeq7.10.3 rev20

Name	Operator	Version
open-xchange_appsuite	eq	7.10.3 rev1
open-xchange_appsuite	eq	7.10.3 rev2
open-xchange_appsuite	eq	7.10.3 rev3
open-xchange_appsuite	eq	7.10.3 rev4
open-xchange_appsuite	eq	7.10.3 rev5
open-xchange_appsuite	eq	7.10.3 rev6
open-xchange_appsuite	eq	7.10.3
open-xchange_appsuite	eq	7.10.3 rev18
open-xchange_appsuite	eq	7.10.3 rev19
open-xchange_appsuite	eq	7.10.3 rev20