Input validation

2023-11-0214:15:00

PRIOn knowledge base

www.prio-n.com

imageconverter

api

input validation

sql injection

network access

database modification

nvd

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements. An attacker with access to the adjacent network and potentially API credentials, could read and modify database content which is accessible to the imageconverter SQL user account. None No publicly available exploits are known.

CPENameOperatorVersion
open-xchange_appsuiteeq7.10.6
open-xchange_appsuiteeq7.10.6 patchrelease6069
open-xchange_appsuiteeq7.10.6 patchrelease6073
open-xchange_appsuiteeq7.10.6 patchrelease6080
open-xchange_appsuiteeq7.10.6 patchrelease6085
open-xchange_appsuiteeq7.10.6 patchrelease6093
open-xchange_appsuiteeq7.10.6 patchrelease6102
open-xchange_appsuiteeq7.10.6 patchrelease6112
open-xchange_appsuiteeq7.10.6 patchrelease6121
open-xchange_appsuiteeq7.10.6 patchrelease6133

Name	Operator	Version
open-xchange_appsuite	eq	7.10.6
open-xchange_appsuite	eq	7.10.6 patchrelease6069
open-xchange_appsuite	eq	7.10.6 patchrelease6073
open-xchange_appsuite	eq	7.10.6 patchrelease6080
open-xchange_appsuite	eq	7.10.6 patchrelease6085
open-xchange_appsuite	eq	7.10.6 patchrelease6093
open-xchange_appsuite	eq	7.10.6 patchrelease6102
open-xchange_appsuite	eq	7.10.6 patchrelease6112
open-xchange_appsuite	eq	7.10.6 patchrelease6121
open-xchange_appsuite	eq	7.10.6 patchrelease6133