4 matches found
CVE-2021-26699
OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used...
5.8CVSS6.8AI score0.02002EPSS
SaveExploits1References1
CVE-2021-26699
OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used...
5.8CVSS0.02002EPSS
SaveExploits1References4
CVE-2021-26699
OX App Suite (Open-Xchange) is affected by CVE-2021-26699 via SSRF in the imageconverter handling of SVG documents when the .png extension is used. The vulnerability targets the backend component and arises from mishandling a shared SVG document, enabling Server-Side Request Forgery. Vulnerable v...
5.8CVSS5.4AI score0.02002EPSS
SaveExploits1References4Affected Software1
20