{"vulnerability": "cve-2022-2310", "sightings": [{"uuid": "b307235c-7a7e-435b-9ac1-abf98fcdcab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23100", "type": "seen", "source": "https://t.me/cibsecurity/47111", "content": "\u203c CVE-2022-23100 \u203c\n\nOX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-27T18:52:46.000000Z"}, {"uuid": "77c0c357-7f9d-45e1-ae32-678954280f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23101", "type": "seen", "source": "https://t.me/cibsecurity/47094", "content": "\u203c CVE-2022-23101 \u203c\n\nOX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-27T18:49:48.000000Z"}, {"uuid": "66a08cfd-7c69-4d7b-bef4-d8d82e5e4650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23103", "type": "seen", "source": "https://t.me/cibsecurity/47666", "content": "\u203c CVE-2022-23103 \u203c\n\nA stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-06T02:21:06.000000Z"}, {"uuid": "c80a9744-f8a1-4f12-925c-c3a423278168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23107", "type": "seen", "source": "https://t.me/cibsecurity/35370", "content": "\u203c CVE-2022-23107 \u203c\n\nJenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T22:17:36.000000Z"}, {"uuid": "dbe7c777-e0a0-4006-9fca-c1117f73da64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23106", "type": "seen", "source": "https://t.me/cibsecurity/35367", "content": "\u203c CVE-2022-23106 \u203c\n\nJenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T22:17:32.000000Z"}, {"uuid": "ed78ed86-65e1-4982-8503-6ea8ab440a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23108", "type": "seen", "source": "https://t.me/cibsecurity/35360", "content": "\u203c CVE-2022-23108 \u203c\n\nJenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T22:17:25.000000Z"}, {"uuid": "37d0b10a-c802-4310-9dd8-daf8a1608722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23109", "type": "seen", "source": "https://t.me/cibsecurity/35358", "content": "\u203c CVE-2022-23109 \u203c\n\nJenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T22:17:23.000000Z"}, {"uuid": "e740ff77-d8ff-474c-b023-1ae906565655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23102", "type": "seen", "source": "https://t.me/cibsecurity/37063", "content": "\u203c CVE-2022-23102 \u203c\n\nA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-09T18:12:53.000000Z"}, {"uuid": "814fa1ca-32b5-423b-b75e-4edbb2fc47b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23100", "type": "seen", "source": "https://t.me/hacking_Attack/62552", "content": "Exploit Collector\nOpen-Xchange App Suite 7.10.x Cross Site Scripting / Command Injection\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nOpen-Xchange App Suite versions 7.10.6 and below suffer from OS command injection and cross site scripting vulnerabilities. One particular cross site scripting issue only affects versions 7.10.5 and below.\n\nSHA-256 | 145c2f74cfe9370dfbec4b0f72f06c5a67138afef07940be7a7e97d9a4b1f072\n\nDownload\nProduct: OX App Suite\nVendor: OX Software GmbH\nInternal reference: DOCS-4106\nVulnerability type: OS Command Injection (CWE-78)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: documentconverter\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3\nVendor notification: 2022-01-10\nSolution date: 2022-01-13\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23100\nCVSS: 8.2 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\nVulnerability Details:\nOX Documentconverter has a Remote Code Execution flaw that allows authenticated OX App Suite users to run commands on the instance which runs OX Documentconverter if they have the ability to perform document conversions, for example of E-Mail attachments or OX Drive content.\n\nRisk:\nAttackers can inject arbitrary operating-system level commands via OX App Suite API and/or OX Documentconverter API. Commands are executed on the instance running OX Documentconverter, based on \"open-xchange\" user privileges. This can be used to modify or exfiltrate configuration files as well as adversely affect the instances availability by excessive resource usage. By default the vulnerable Documentconverter API is not publicly accessible, however this might be worked around by abusing other weaknesses, configuration flaws or social engineering.\n\nSteps to reproduce:\n1. Create a forged Documentconverter API call that embeds escape characters and a system command\n2. Inject the malicious API call via App Suite as a proxy or other means\n\nSolution:\nWe reduceed available API parameters to a limited set of enumerations, rather than accepting API input.\n---\nInternal reference: MWB-1350\nVulnerability type: Cross-Site Scripting (CWE-80)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: backend\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev78, 7.10.3-rev38, 7.10.4-rev31, 7.10.5-rev37, 7.10.6-rev9\nVendor notification: 2021-11-30\nSolution date: 2022-02-15\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23099\nCVSS: 3.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\nVulnerability Details:\nExisting sanitization and filtering mechanisms for HTML files can be bypassed by forcing block-wise read. Using this technique, the recognition procedure misses to detect tags and attributes that span multiple blocks.\n\nRisk:\nMalicious script code can be executed within a users context. This can lead to session hijacking or triggering unwanted actions via the web interface (e.g. redirecting to a third-party site). To exploit this an attacker would require the victim to follow a hyperlink.\n\nSteps to reproduce:\n1. As attacker, create a HTML malicious code-snippet which masks tags (e.g.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:34.000153Z"}, {"uuid": "ee0dda45-0ae5-4536-9928-026f4cc931f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23100", "type": "seen", "source": "https://t.me/hacking_Attack/62552", "content": "Exploit Collector\nOpen-Xchange App Suite 7.10.x Cross Site Scripting / Command Injection\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nOpen-Xchange App Suite versions 7.10.6 and below suffer from OS command injection and cross site scripting vulnerabilities. One particular cross site scripting issue only affects versions 7.10.5 and below.\n\nSHA-256 | 145c2f74cfe9370dfbec4b0f72f06c5a67138afef07940be7a7e97d9a4b1f072\n\nDownload\nProduct: OX App Suite\nVendor: OX Software GmbH\nInternal reference: DOCS-4106\nVulnerability type: OS Command Injection (CWE-78)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: documentconverter\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3\nVendor notification: 2022-01-10\nSolution date: 2022-01-13\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23100\nCVSS: 8.2 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\nVulnerability Details:\nOX Documentconverter has a Remote Code Execution flaw that allows authenticated OX App Suite users to run commands on the instance which runs OX Documentconverter if they have the ability to perform document conversions, for example of E-Mail attachments or OX Drive content.\n\nRisk:\nAttackers can inject arbitrary operating-system level commands via OX App Suite API and/or OX Documentconverter API. Commands are executed on the instance running OX Documentconverter, based on \"open-xchange\" user privileges. This can be used to modify or exfiltrate configuration files as well as adversely affect the instances availability by excessive resource usage. By default the vulnerable Documentconverter API is not publicly accessible, however this might be worked around by abusing other weaknesses, configuration flaws or social engineering.\n\nSteps to reproduce:\n1. Create a forged Documentconverter API call that embeds escape characters and a system command\n2. Inject the malicious API call via App Suite as a proxy or other means\n\nSolution:\nWe reduceed available API parameters to a limited set of enumerations, rather than accepting API input.\n---\nInternal reference: MWB-1350\nVulnerability type: Cross-Site Scripting (CWE-80)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: backend\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev78, 7.10.3-rev38, 7.10.4-rev31, 7.10.5-rev37, 7.10.6-rev9\nVendor notification: 2021-11-30\nSolution date: 2022-02-15\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23099\nCVSS: 3.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\nVulnerability Details:\nExisting sanitization and filtering mechanisms for HTML files can be bypassed by forcing block-wise read. Using this technique, the recognition procedure misses to detect tags and attributes that span multiple blocks.\n\nRisk:\nMalicious script code can be executed within a users context. This can lead to session hijacking or triggering unwanted actions via the web interface (e.g. redirecting to a third-party site). To exploit this an attacker would require the victim to follow a hyperlink.\n\nSteps to reproduce:\n1. As attacker, create a HTML malicious code-snippet which masks tags (e.g.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:43.676261Z"}, {"uuid": "79c4b9ab-83ae-4bbb-9dd2-90a34a8fb8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23100", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/62552", "content": "Exploit Collector\nOpen-Xchange App Suite 7.10.x Cross Site Scripting / Command Injection\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nOpen-Xchange App Suite versions 7.10.6 and below suffer from OS command injection and cross site scripting vulnerabilities. One particular cross site scripting issue only affects versions 7.10.5 and below.\n\nSHA-256 | 145c2f74cfe9370dfbec4b0f72f06c5a67138afef07940be7a7e97d9a4b1f072\n\nDownload\nProduct: OX App Suite\nVendor: OX Software GmbH\nInternal reference: DOCS-4106\nVulnerability type: OS Command Injection (CWE-78)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: documentconverter\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3\nVendor notification: 2022-01-10\nSolution date: 2022-01-13\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23100\nCVSS: 8.2 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\nVulnerability Details:\nOX Documentconverter has a Remote Code Execution flaw that allows authenticated OX App Suite users to run commands on the instance which runs OX Documentconverter if they have the ability to perform document conversions, for example of E-Mail attachments or OX Drive content.\n\nRisk:\nAttackers can inject arbitrary operating-system level commands via OX App Suite API and/or OX Documentconverter API. Commands are executed on the instance running OX Documentconverter, based on \"open-xchange\" user privileges. This can be used to modify or exfiltrate configuration files as well as adversely affect the instances availability by excessive resource usage. By default the vulnerable Documentconverter API is not publicly accessible, however this might be worked around by abusing other weaknesses, configuration flaws or social engineering.\n\nSteps to reproduce:\n1. Create a forged Documentconverter API call that embeds escape characters and a system command\n2. Inject the malicious API call via App Suite as a proxy or other means\n\nSolution:\nWe reduceed available API parameters to a limited set of enumerations, rather than accepting API input.\n---\nInternal reference: MWB-1350\nVulnerability type: Cross-Site Scripting (CWE-80)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: backend\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev78, 7.10.3-rev38, 7.10.4-rev31, 7.10.5-rev37, 7.10.6-rev9\nVendor notification: 2021-11-30\nSolution date: 2022-02-15\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23099\nCVSS: 3.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\nVulnerability Details:\nExisting sanitization and filtering mechanisms for HTML files can be bypassed by forcing block-wise read. Using this technique, the recognition procedure misses to detect tags and attributes that span multiple blocks.\n\nRisk:\nMalicious script code can be executed within a users context. This can lead to session hijacking or triggering unwanted actions via the web interface (e.g. redirecting to a third-party site). To exploit this an attacker would require the victim to follow a hyperlink.\n\nSteps to reproduce:\n1. As attacker, create a HTML malicious code-snippet which masks tags (e.g.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T15:00:07.137728Z"}, {"uuid": "a44c5729-df7e-4d7a-b621-5ec5f5b467d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23100", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/62552", "content": "Exploit Collector\nOpen-Xchange App Suite 7.10.x Cross Site Scripting / Command Injection\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nOpen-Xchange App Suite versions 7.10.6 and below suffer from OS command injection and cross site scripting vulnerabilities. One particular cross site scripting issue only affects versions 7.10.5 and below.\n\nSHA-256 | 145c2f74cfe9370dfbec4b0f72f06c5a67138afef07940be7a7e97d9a4b1f072\n\nDownload\nProduct: OX App Suite\nVendor: OX Software GmbH\nInternal reference: DOCS-4106\nVulnerability type: OS Command Injection (CWE-78)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: documentconverter\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev13, 7.10.3-rev6, 7.10.4-rev6, 7.10.5-rev5, 7.10.6-rev3\nVendor notification: 2022-01-10\nSolution date: 2022-01-13\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23100\nCVSS: 8.2 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\nVulnerability Details:\nOX Documentconverter has a Remote Code Execution flaw that allows authenticated OX App Suite users to run commands on the instance which runs OX Documentconverter if they have the ability to perform document conversions, for example of E-Mail attachments or OX Drive content.\n\nRisk:\nAttackers can inject arbitrary operating-system level commands via OX App Suite API and/or OX Documentconverter API. Commands are executed on the instance running OX Documentconverter, based on \"open-xchange\" user privileges. This can be used to modify or exfiltrate configuration files as well as adversely affect the instances availability by excessive resource usage. By default the vulnerable Documentconverter API is not publicly accessible, however this might be worked around by abusing other weaknesses, configuration flaws or social engineering.\n\nSteps to reproduce:\n1. Create a forged Documentconverter API call that embeds escape characters and a system command\n2. Inject the malicious API call via App Suite as a proxy or other means\n\nSolution:\nWe reduceed available API parameters to a limited set of enumerations, rather than accepting API input.\n---\nInternal reference: MWB-1350\nVulnerability type: Cross-Site Scripting (CWE-80)\nVulnerable version: 7.10.6 and earlier\nVulnerable component: backend\nReport confidence: Confirmed\nSolution status: Fixed by Vendor\nFixed version: 7.8.4-rev78, 7.10.3-rev38, 7.10.4-rev31, 7.10.5-rev37, 7.10.6-rev9\nVendor notification: 2021-11-30\nSolution date: 2022-02-15\nPublic disclosure: 2022-07-21\nCVE reference: CVE-2022-23099\nCVSS: 3.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\nVulnerability Details:\nExisting sanitization and filtering mechanisms for HTML files can be bypassed by forcing block-wise read. Using this technique, the recognition procedure misses to detect tags and attributes that span multiple blocks.\n\nRisk:\nMalicious script code can be executed within a users context. This can lead to session hijacking or triggering unwanted actions via the web interface (e.g. redirecting to a third-party site). To exploit this an attacker would require the victim to follow a hyperlink.\n\nSteps to reproduce:\n1. As attacker, create a HTML malicious code-snippet which masks tags (e.g.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:44.432826Z"}]}