CVE-2015-7385

概要

参考情報

• packetstormsecurity.com/files/134415/Open-Xchange-Guard-2.0-Cross-Site-Scripting.html
• software.open-xchange.com/products/guard/doc/Release_Notes_for_Patch_Release_2777_2.0.0_2015-09-30.pdf · Vendor Advisory
• securityfocus.com/archive/1/536923/100/0/threaded
• securitytracker.com/id/1034166

ox guard のその他の脆弱性

• CVE-2023-26456中 5.4Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the…
• CVE-2020-28944高 7.5OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
• CVE-2020-9427中 5.0OX Guard 2.10.3 and earlier allows SSRF.
• CVE-2020-9426中 6.1OX Guard 2.10.3 and earlier allows XSS.
• CVE-2018-10986高 8.8OX Guard 2.8.0 has CSRF.