CVE-2021-28093

概要

参考情報

• packetstormsecurity.com/files/163569/OX-Documents-7.10.5-Improper-Authorization.html · Third Party Advisory
• seclists.org/fulldisclosure/2021/Jul/37 · Mailing List
• open-xchange.com · Product

open-xchange documents のその他の脆弱性

• CVE-2021-28095中 4.8OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, du…
• CVE-2021-28094中 6.5OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.