← All advisories

Medium severity6.5NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026

CVE-2021-28094

CVE-2021-28094

Description

OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

Open-Xchange/Documentsllm-create10 versions
<7.10.5-rev7+ 9 more
- (no CPE)range: <7.10.5-rev7
- (no CPE)
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision1:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision2:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision3:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision4:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision5:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:revision6:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_documents:*:*:*:*:*:*:*:*range: <7.10.5
- cpe:2.3:a:open-xchange:open-xchange_documents:7.10.5:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/163569/OX-Documents-7.10.5-Improper-Authorization.htmlnvdThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2021/Jul/37nvdMailing ListThird Party Advisory
www.open-xchange.comnvdProduct

News mentions

0

No linked articles in our index yet.