CVE-2021-33493

CVE-2021-33493 pertains to Open-Xchange OX App Suite (OX App Suite/OX Documents) up to version 7.10.5, where the middleware component allows Code Injection via YAML-formatted Java classes. The root cause is the handling of YAML-based Java class definitions in the middleware, enabling an attacker ...

CVE-2021-33493

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format...

OX App Suite / Ox Documents 7.10.x XSS / Code Injection / Traversal

Product: OX App Suite, OX Documents Vendor: OX Software GmbH Internal reference: MWB-993 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.3-rev35,...