CVE-2014-5236

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow…

published January 31, 2020

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDocument text file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03809 · 90.0th percentile
Published
2020-01-31T21:16Z
EPSS history
Timeline
  • 31 JAN 21:16Z
    Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow…
    cvelistv5