CVE-2021-28094

Medium

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

mitre·CWE-326·Published 2021-07-27

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

140 chars

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

NVDen

140 chars

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

OX Documents versiones anteriores a 7.10.5-rev7, presenta un Control de Acceso Incorrecto para los documentos convertidos porque pueden ocurrir colisiones de hash, debido al uso de CRC32

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	6.5	3.9	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N