medium5.3
CVE-2021-38376
OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.
Impact
OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Xchange | Ox App Suite | through 7.10.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165038/OX-App-Suite-7.10.5-Cross-Site-Scripting-Information-Disclosure.html
- https://seclists.org/fulldisclosure/2021/Nov/43
- https://www.open-xchange.com
- http://packetstormsecurity.com/files/165038/OX-App-Suite-7.10.5-Cross-Site-Scripting-Information-Disclosure.html
- https://seclists.org/fulldisclosure/2021/Nov/43
- https://www.open-xchange.com