CVE-2021-28095

Medium

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur,…

mitre·CWE-326·Published 2021-07-27

CVSS

4.8

EPSS

0.01

KEV

Exploits

cve.orgen

158 chars

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.

NVDen

158 chars

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.

OX Documents versiones anteriores a 7.10.5-rev5, presenta un Control de Acceso Incorrecto para los documentos que contienen estructuras XML porque pueden ocurrir colisiones de hash, debido al uso de CRC32

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	4.8	2.2	2.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N