8 matches found
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS.
CVE-2019-14225
OX App Suite 7.10.1 and 7.10.2 allows SSRF.
CVE-2020-15003
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).
CVE-2020-15004
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.
CVE-2020-8541
OX App Suite through 7.10.3 allows XXE attacks.
CVE-2020-8544
OX App Suite through 7.10.3 allows SSRF.
CVE-2020-8542
OX App Suite through 7.10.3 allows XSS.
CVE-2020-8543
OX App Suite through 7.10.3 has Improper Input Validation.