Beveiligingsadvies

CVE-2022-45175

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-14 00:00:00

Laatst bijgewerkt 2025-02-07 16:35:41

Toegewezen door mitre

CVSS-score 6.5

Status PUBLISHED

Beschrijving

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/{ID-FILE]/c/{N]/{C]/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a target file.

← Alle CVE's bekijken Bekijk op cve.org ↗