CVE-2014-5237

Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before…

published December 1, 2014

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allows remote attackers to trigger requests to arbitrary servers and embed arbitrary images via a URL in an embedded image in a Text document, which is not properly handled by the image preview.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02357 · 83.5th percentile
Published
2014-12-01T15:00Z
EPSS history
Timeline
  • 01 DEC 15:00Z
    Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before…
    cvelistv5