CVE-2021-28095

Published: Jul 30, 2021Modified: Jun 17, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: NVD

Description

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.

Affected (6)

Products: Open Xchange: Open Xchange Documents

Open Xchange

1 product

Open Xchange Documents

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Documents	Before 7.10.5
Open Xchange Open Xchange Documents	Version 7.10.5
Open Xchange Open Xchange Documents	Version 7.10.5 revision1
Open Xchange Open Xchange Documents	Version 7.10.5 revision2
Open Xchange Open Xchange Documents	Version 7.10.5 revision3
Open Xchange Open Xchange Documents	Version 7.10.5 revision4