159 matches found
Blind-SSRF-CVE-2020-15002
概要 AddFileAction.getImageDataFromUrl 内の、/appsuite/api/oxodocumentfilter&action=addfile を処理する際に外部URLから画像を取得するロジック（こちらで実装）では、すべてのリダイレクトを辿った後にのみリダイレクト先URLを検証しています。 response = httpClient.executegetRequest, context; int statusCode = response.getStatusLine.getStatusCode; if statusCode == HttpStatus.SCO...
CVE-2013-6009
CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet...
EUVD-2013-5770
Malware in sbrugna...
EUVD-2013-5040
Malware in sbrugna...
EUVD-2013-5768
Malware in sbrugna...
EUVD-2013-5839
Malware in sbrugna...
EUVD-2013-7244
Malware in sbrugna...
EUVD-2013-6925
Malware in sbrugna...
EUVD-2013-6069
Malware in sbrugna...
EUVD-2014-9285
Malware in sbrugna...
EUVD-2014-8819
Malware in sbrugna...
EUVD-2014-2428
Malware in sbrugna...
EUVD-2014-2118
Malware in sbrugna...
EUVD-2016-7731
Malware in sbrugna...
EUVD-2013-4877
Malware in sbrugna...
EUVD-2013-6923
Malware in sbrugna...
EUVD-2013-2525
Malware in sbrugna...
EUVD-2014-1753
Malware in sbrugna...