PT-2021-17741
CVE-2021-28095
·
Published
2021-07-27
·
Updated
2022-07-12
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
OX Documents versions prior to 7.10.5-rev5
Description:
The issue is related to incorrect access control for documents containing XML structures. This is due to the potential for hash collisions, which can occur because of the use of CRC32.
Recommendations:
For versions prior to 7.10.5-rev5, update to version 7.10.5-rev5 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾