CVE-2021-26699

MEDIUM 5.4CVE-2021-26699 · Published 22/07/2021 · updated 17/06/2026

In short

CVE-2021-26699 is a MEDIUM (CVSS 5.4) vulnerability affecting open-xchange appsuite (open-xchange).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open-xchange appsuite open-xchange	`= 7.10.3= 7.10.4`	No fix yet

Description

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

References

packetstormsecurity.com/files/163527/OX-App-Suite-OX-Guard-OX-Documents-SSRF-Cross-Site-Scripting.html · Third Party Advisory
seclists.org/fulldisclosure/2021/Jul/33 · Mailing List
seclists.org/fulldisclosure/2021/Jul/33 · Mailing List
open-xchange.com · Vendor Advisory

More vulnerabilities in open-xchange appsuite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

open-xchange appsuite

open-xchange

= 7.10.3= 7.10.4

No fix yet

More vulnerabilities in open-xchange appsuite

See all →