Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open-Xchange OX App Suite 安全特征问题漏洞
Vulnerability Description
Open-Xchange OX App Suite是德国Open-Xchange公司的一个电子邮件及生产力套件客户端软件。 Open-Xchange OX App Suite 7.10.6之前版本存在安全特征问题漏洞,该漏洞源于通过创建 HTTP 多部分表单数据边界的冲突,可以更改 OX App Suite 和 OX Documentconverter 之间的 API 请求参数,攻击者利用该漏洞可以修改对 OX Documentconverter 的内部 API 调用的参数,从而绕过网络信任边界。
CVSS Information
N/A
Vulnerability Type
N/A