CVE-2022-23100

CRITICAL

OX App Suite <= 7.10.6 - OS Command Injection via Documentconverter

Title source: llm

OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).

Core 2

Core References

Product, Vendor Advisory x_refsource_misc

Exploit, Mailing List, Third Party Advisory x_refsource_confirm

CVSS v3 9.8

EPSS 0.0253

EPSS Percentile 85.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Status published

Products (1)

open-xchange/ox_app_suite < 7.10.6

Published Jul 27, 2022

Tracked Since Feb 18, 2026