CVE-2021-28093

MEDIUM

OX Documents <7.10.5-rev5 - Info Disclosure

Title source: llm

OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32.

CVSS v3 6.5

EPSS 0.0013

EPSS Percentile 32.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-326

Status published

Products (2)

open-xchange/open-xchange_documents 7.10.5 (5 CPE variants)

open-xchange/open-xchange_documents < 7.10.5

Published Jul 30, 2021

Tracked Since Feb 18, 2026