CVE-2020-9426

Mô tả

Tham khảo

• packetstormsecurity.com/files/158069/OX-Guard-2.10.3-Cross-Site-Scripting-Server-Side-Request-Forgery.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Jun/20 · Mailing List
• open-xchange.com · Vendor Advisory

Lỗ hổng khác của ox guard

• CVE-2023-26456TRUNG BÌNH 5.4Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the…
• CVE-2020-28944CAO 7.5OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data.
• CVE-2020-9427TRUNG BÌNH 5.0OX Guard 2.10.3 and earlier allows SSRF.
• CVE-2018-10986CAO 8.8OX Guard 2.8.0 has CSRF.
• CVE-2016-6854TRUNG BÌNH 6.1An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets …