Skip to content
OpenAdvisories
Unscored CVE-2021-20839 EUVD-2021-8251GHSA-gcx3-8mj9-xgm6

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML Ext…

Published Nov 1, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.

Affected products

VendorProductAffectedFixed
Antenna House Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier —

References