Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the publication template path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open-Xchange Server 目录遍历漏洞
Vulnerability Description
Open-Xchange Server是美国Open-Xchange公司的一个半开源项目。该项目主要用于开发协同软件，例如电子邮件、日历等。 Open-Xchange Server中存在目录遍历漏洞。远程授权的攻击者可借助出版模板路径下的‘..’，利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A