CVE-2021-26699

open-xchange appsuite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-26699

Katalog CVE

CVSS 5.4 · Medium EPSS 2,0%

Kerentanan Server-Side Request Forgery (SSRF) pada open-xchange appsuite. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.

Rincian

Terbit di NVD
22 Juli 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-918: Server-Side Request Forgery (SSRF)
EPSS (30 hari)
2,0% peluang dieksploitasi; lebih tinggi dari 80,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange open-xchange appsuite Versi 7.10.3
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5547
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5572
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5623
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5653
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5677
open-xchange open-xchange appsuite Versi 7.10.3 patch_release5720
open-xchange open-xchange appsuite Versi 7.10.3 rev1
open-xchange open-xchange appsuite Versi 7.10.3 rev10
open-xchange open-xchange appsuite Versi 7.10.3 rev11
open-xchange open-xchange appsuite Versi 7.10.3 rev12
open-xchange open-xchange appsuite Versi 7.10.3 rev13
open-xchange open-xchange appsuite Versi 7.10.3 rev14
open-xchange open-xchange appsuite Versi 7.10.3 rev15
open-xchange open-xchange appsuite Versi 7.10.3 rev16
open-xchange open-xchange appsuite Versi 7.10.3 rev17
open-xchange open-xchange appsuite Versi 7.10.3 rev18
open-xchange open-xchange appsuite Versi 7.10.3 rev19
open-xchange open-xchange appsuite Versi 7.10.3 rev2
open-xchange open-xchange appsuite Versi 7.10.3 rev20
open-xchange open-xchange appsuite Versi 7.10.3 rev21
open-xchange open-xchange appsuite Versi 7.10.3 rev22
open-xchange open-xchange appsuite Versi 7.10.3 rev23
open-xchange open-xchange appsuite Versi 7.10.3 rev24
open-xchange open-xchange appsuite Versi 7.10.3 rev25
open-xchange open-xchange appsuite Versi 7.10.3 rev26
open-xchange open-xchange appsuite Versi 7.10.3 rev27
open-xchange open-xchange appsuite Versi 7.10.3 rev28
open-xchange open-xchange appsuite Versi 7.10.3 rev29
open-xchange open-xchange appsuite Versi 7.10.3 rev3
open-xchange open-xchange appsuite Versi 7.10.3 rev30
open-xchange open-xchange appsuite Versi 7.10.3 rev31
open-xchange open-xchange appsuite Versi 7.10.3 rev4
open-xchange open-xchange appsuite Versi 7.10.3 rev5
open-xchange open-xchange appsuite Versi 7.10.3 rev6
open-xchange open-xchange appsuite Versi 7.10.3 rev7
open-xchange open-xchange appsuite Versi 7.10.3 rev8
open-xchange open-xchange appsuite Versi 7.10.3 rev9
open-xchange open-xchange appsuite Versi 7.10.4
open-xchange open-xchange appsuite Versi 7.10.4 rev1
open-xchange open-xchange appsuite Versi 7.10.4 rev10
open-xchange open-xchange appsuite Versi 7.10.4 rev11
open-xchange open-xchange appsuite Versi 7.10.4 rev12
open-xchange open-xchange appsuite Versi 7.10.4 rev13
open-xchange open-xchange appsuite Versi 7.10.4 rev14
open-xchange open-xchange appsuite Versi 7.10.4 rev15
open-xchange open-xchange appsuite Versi 7.10.4 rev16
open-xchange open-xchange appsuite Versi 7.10.4 rev17
open-xchange open-xchange appsuite Versi 7.10.4 rev2
open-xchange open-xchange appsuite Versi 7.10.4 rev3
open-xchange open-xchange appsuite Versi 7.10.4 rev4
open-xchange open-xchange appsuite Versi 7.10.4 rev5
open-xchange open-xchange appsuite Versi 7.10.4 rev6
open-xchange open-xchange appsuite Versi 7.10.4 rev7
open-xchange open-xchange appsuite Versi 7.10.4 rev8
open-xchange open-xchange appsuite Versi 7.10.4 rev9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.