CVE-2021-33493

MEDIUM

OX App Suite <7.10.5 - Code Injection

Title source: llm
STIX 2.1

Description

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.

References (3)

Core 3
Core References
Product, Vendor Advisory x_refsource_misc
https://open-xchange.com
Exploit, Mailing List, Third Party Advisory x_refsource_misc
https://seclists.org/fulldisclosure/2021/Nov/42

Scores

CVSS v3 6.0
EPSS 0.0020
EPSS Percentile 42.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
open-xchange/ox_app_suite < 7.10.5
Published Nov 22, 2021
Tracked Since Feb 18, 2026