CVE-2021-28094

MEDIUM

OX Documents <7.10.5-rev7 - Info Disclosure

Title source: llm

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

CVSS v3 6.5

EPSS 0.0013

EPSS Percentile 32.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-326

Status published

Products (2)

open-xchange/open-xchange_documents 7.10.5 (7 CPE variants)

open-xchange/open-xchange_documents < 7.10.5

Published Jul 30, 2021

Tracked Since Feb 18, 2026