CVE-2021-33491: Open-Xchange Ox App Suite

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records.

Affected products

• Open-Xchange Ox App Suite: up to and including 7.10.5

Published 2021-11-22. Last modified 2026-06-17.