CVE-2021-26699

Published: Jul 22, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

Affected (56)

Products: Open Xchange: Open Xchange Appsuite

Open Xchange

1 product

Open Xchange Appsuite

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Appsuite	Version 7.10.3
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5547
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5572
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5623
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5653
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5677
Open Xchange Open Xchange Appsuite	Version 7.10.3 patch_release5720
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev10
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev11
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev12
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev13
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev14
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev15
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev16
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev17
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev18
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev19
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev1
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev20
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev21
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev22
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev23
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev24
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev25
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev26
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev27
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev28
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev29
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev2
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev30
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev31
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev3
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev4
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev5
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev6
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev7
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev8
Open Xchange Open Xchange Appsuite	Version 7.10.3 rev9
Open Xchange Open Xchange Appsuite	Version 7.10.4
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev10
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev11
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev12
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev13
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev14
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev15
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev16
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev17
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev1
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev2
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev3
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev4
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev5
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev6
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev7
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev8
Open Xchange Open Xchange Appsuite	Version 7.10.4 rev9