CVE-2018-12611

OX App Suite 7.8.4 and earlier allows Directory Traversal...

CVE-2018-12611

OX App Suite 7.8.4 and earlier allows Directory Traversal...

CVE-2018-12611

OX App Suite 7.8.4 and earlier allows Directory Traversal...

CVE-2018-12611

OX App Suite 7.8.4 and earlier is affected by a directory traversal vulnerability in the backend component. The issue arises from unexpected values of the content XML tag’s type parameter, which bypasses the content sanitizer and can disclose files. Affected versions: 7.8.4 and earlier; fixed in ...

Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product:...