OX App Suite vulnerabilities
5 known vulnerabilities in OX App Suite from Open-Xchange. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
OX App Suite: Uncontrolled Resource Consumption
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and p
- 8.1 High severity
OX App Suite: Improper Access Control
User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API. The existing switch to disable the feature by default was not effective in this case. Unauthorized users could discover and modify application state, incl
- 9.6 Critical severity
OX App Suite: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy. Unauthorized users could break confidentiality of information in the directory and potential
- 8.8 High severity
OX App Suite: Improper Neutralization of Special Elements used in an OS Command
A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user. Users and attackers could run system commands with limited privilege to gain unauthorized access to confident
- 9.8 Critical severity
Ox App Suite: Improper Neutralization of Special Elements used in an OS Command
documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.