8.8
Élevée
CVE-2023-29048 A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as…
Description
A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user. Users and attackers could run system commands with limited privilege to gain unauthorized access to confidential information and potentially violate integrity by modifying resources. The template engine has been reconfigured to deny execution of harmful commands on a system level. No publicly available exploits are known.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OX App Suite 7.10 | premières → 7.10.6-rev50 | Pas de correctif indiqué |
Autres CVE de OX App Suite
Les 27 CVE de OX App Suite →
CVE-2025-59026
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Moyenne
CVE-2025-59025
Malicious e-mail content can be used to execute script code
6.1
Moyenne
CVE-2025-30190
Malicious content at office documents can be used to inject script code when editing a document
5.4
Moyenne
CVE-2025-30186
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links
5.4
Moyenne