CVE-2022-23100

CRITICAL

Open-xchange OX App Suite < 7.10.6 - OS Command Injection

Title source: rule

Description

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).

References (2)

Scores

CVSS v3 9.8
EPSS 0.0253
EPSS Percentile 85.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-78
Status published

Affected Products (1)

open-xchange/ox_app_suite < 7.10.6

Timeline

Published Jul 27, 2022
Tracked Since Feb 18, 2026