Vulnerabilities > CVE-2021-26699 - Server-Side Request Forgery (SSRF) vulnerability in Open-Xchange Appsuite 7.10.3/7.10.4

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
LOW
network
low complexity
open-xchange
CWE-918
NVD
Published: 2021-07-22
Updated: 2024-11-21

Summary

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

Vulnerable Configurations

Part Description Count
Application
Open-Xchange
56

Common Weakness Enumeration (CWE)

References