CVE-2022-23100

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter e.g., through an email attachment...

CVE-2022-23100

creationtimestamp| type| source ---|---|--- 2022-07-27 18:52:46+00:00| seen| https://t.me/cibsecurity/47111 2026-09-01 20:01:34+00:00| seen| https://t.me/hackingAttack/62552 2026-09-02 01:01:43+00:00| seen| https://t.me/hackingAttack/62552 2026-09-05 15:00:07+00:00| published-proof-of-concept|...

CVE-2022-23100

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter e.g., through an email attachment...

CVE-2022-23100

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter e.g., through an email attachment...

CVE-2022-23100

CVE-2022-23100 affects Open-Xchange OX App Suite up to version 7.10.6, where the vulnerability exists in the Documentconverter component allowing OS command injection. An authenticated OX App Suite user can trigger a document conversion (e.g., via an email attachment or OX Drive content) and exec...