Unrated
OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
CVE-2022-24405
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web open-xchange.com
- web seclists.org