Open-Xchange (OX) App Suite XML External Entity Information Disclosure Vulnerability

Open-Xchange OX App Suite is prone to an information disclosure vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

CVE-2016-4047

CVE-2016-4047 affects Open-Xchange OX App Suite prior to 7.8.1-rev8. The root cause is information disclosure through parsing of generated documents where references to external Open XML DTD resources can be embedded in .docx/.xlsx files; these resources are requested during parsing, enabling an ...