CVE-2018-5751

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows…

published June 15, 2018

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the "groups" and "users" APIs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08939 · 95.2th percentile
Published
2018-06-15T21:00Z
EPSS history
Timeline
  • 15 JUN 21:00Z
    The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows…
    cvelistv5