CVE-2021-26699

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the…

published July 22, 2021

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02002 · 80.6th percentile
Published
2021-07-22T16:22Z
EPSS history
Timeline
  • 22 JUL 16:22Z
    OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the…
    cvelistv5