CVE-2021-33493
MEDIUM 6.0EPSS 0.5%
The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.
- CVSS v3.1 NVD
- 6.0 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - CVSS v2.0 NVD
- 3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P - EPSS
- 0.49% chance of exploitation in the next 30 days, 41st percentile
- Published
- 2021-11-22
- Updated
- 2024-08-03
Proof-of-concept exploits (2)
- http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Inj…
- https://seclists.org/fulldisclosure/2021/Nov/42