| Package | Affected versions | Patched versions |
|---|---|---|
| open-xchange appsuite | = 7.4.2= 7.6.0≤ 7.4.1 |
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free