3 matches found
CVE-2020-15003
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...
4.3CVSS0.00789EPSS
SaveExploits2References2
CVE-2020-15003
OX App Suite (backend) up to version 7.10.3 contains an information disclosure vulnerability where a user can obtain the IP address and User-Agent string of another user via the session API during shared Drive access. Root cause involves exposure through the session API during Drive sharing, enab...
4.3CVSS4.7AI score0.00789EPSS
SaveExploits2References2Affected Software1
20