deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52341
Published: 2024-04-08
Description: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52342
Published: 2024-04-08
Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52343
Published: 2024-04-08
Description: In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1284
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52344
Published: 2024-04-08
Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52345
Published: 2024-04-08
Description: In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-922
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52346
Published: 2024-04-08
Description: In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52347
Published: 2024-04-08
Description: In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52348
Published: 2024-04-08
Description: In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52349
Published: 2024-04-08
Description: In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52350
Published: 2024-04-08
Description: In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52351
Published: 2024-04-08
Description: In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52352
Published: 2024-04-08
Description: In Network Adapter Service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2023-52533
Published: 2024-04-08
Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-475
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602
CVE: CVE-2023-52534
Published: 2024-04-08
Description: In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-754
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602
CVE: CVE-2023-52535
Published: 2024-04-08
Description: In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602
CVE: CVE-2023-52536
Published: 2024-04-08
Description: In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]50809602
CVE: CVE-2024-23658
Published: 2024-04-08
Description: In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]12781313
CVE: CVE-2024-1292
Published: 2024-04-08
Description: The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/56d4fc48-d0dc-4ac6-93cd-f64d4c3c5c07/; https://wpscan.com/vulnerability/56d4fc48-d0dc-4ac6-93cd-f64d4c3c5c07/
CVE: CVE-2024-1588
Published: 2024-04-08
Description: The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2772c921-d977-4150-b207-ae5ba5e2a6db/; https://wpscan.com/vulnerability/2772c921-d977-4150-b207-ae5ba5e2a6db/
CVE: CVE-2024-1589
Published: 2024-04-08
Description: The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5cfbbddd-d941-4665-be8b-a[PII_REDACTED]1/; https://wpscan.com/vulnerability/5cfbbddd-d941-4665-be8b-a[PII_REDACTED]1/
CVE: CVE-2024-1752
Published: 2024-04-08
Description: The Font Farsi WordPress plugin through 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7c87fcd2-6ffd-4285-bbf5-36efea70b620/; https://wpscan.com/vulnerability/7c87fcd2-6ffd-4285-bbf5-36efea70b620/
CVE: CVE-2024-1956
Published: 2024-04-08
Description: The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d7034ac2-0098-48d2-9ba9-87e09b178f7d/; https://wpscan.com/vulnerability/d7034ac2-0098-48d2-9ba9-87e09b178f7d/
CVE: CVE-2024-1958
Published: 2024-04-08
Description: The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8be4ebcf-2b42-4b88-89a0-2df6dbf00b55/; https://wpscan.com/vulnerability/8be4ebcf-2b42-4b88-89a0-2df6dbf00b55/
CVE: CVE-2024-27488
Published: 2024-04-08
Description: Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter method to authenticate the http restful api interface, but the secret is hardcoded by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259
References: https://gist.github.com/tr4pmaker/44442d6f[PII_REDACTED]13f4ba71da1312; https://gist.github.com/tr4pmaker/44442d6f[PII_REDACTED]13f4ba71da1312
CVE: CVE-2024-31022
Published: 2024-04-08
Description: An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.xuxblog.top/2024/03/25/CandyCMS-Pre-Auth-RCE/; https://www.xuxblog.top/2024/03/25/CandyCMS-Pre-Auth-RCE/
CVE: CVE-2024-30659
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30661
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30662
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30663
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30665
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30666
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30667
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30672
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30674
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2024-30675
Published: 2024-04-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
CVE: CVE-2023-52359
Published: 2024-04-08
Description: Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52388
Published: 2024-04-08
Description: Permission control vulnerability in the clock module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52537
Published: 2024-04-08
Description: Vulnerability of package name verification being bypassed in the HwIms module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-280, CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52538
Published: 2024-04-08
Description: Vulnerability of package name verification being bypassed in the HwIms module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347, CWE-863
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52539
Published: 2024-04-08
Description: Permission verification vulnerability in the Settings module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52540
Published: 2024-04-08
Description: Vulnerability of improper authentication in the Iaware module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52541
Published: 2024-04-08
Description: Authentication vulnerability in the API for app pre-loading.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52542
Published: 2024-04-08
Description: Permission verification vulnerability in the system module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-281
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52543
Published: 2024-04-08
Description: Permission verification vulnerability in the system module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52544
Published: 2024-04-08
Description: Vulnerability of file path verification being bypassed in the email module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52545
Published: 2024-04-08
Description: Vulnerability of undefined permissions in the Calendar app.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52546
Published: 2024-04-08
Description: Vulnerability of package name verification being bypassed in the Calendar app.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52549
Published: 2024-04-08
Description: Vulnerability of data verification errors in the kernel module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52550
Published: 2024-04-08
Description: Vulnerability of data verification errors in the kernel module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52551
Published: 2024-04-08
Description: Vulnerability of data verification errors in the kernel module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52552
Published: 2024-04-08
Description: Input verification vulnerability in the power module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52553
Published: 2024-04-08
Description: Race condition vulnerability in the Wi-Fi module.
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362, CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2023-52554
Published: 2024-04-08
Description: Permission control vulnerability in the Bluetooth module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://consumer.huawei.com/en/support/bulletin/2024/3/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/3/
CVE: CVE-2024-23189
Published: 2024-04-08
Description: Embedded content references at tasks could be used to temporarily execute script code in the context of the users browser session. To exploit this an attacker would require temporary access to the users account, access to another account within the same context or an successful social engineering attack to make users import external content. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. Sanitization of user-generated content has been improved. No publicly available exploits are known.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.open-xchange.com/appsuite/releases/8.21/; https://documentation.open-xchange.com/appsuite/releases/8.22/; https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2024/oxas-adv-2024-0001.json