Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content.
| Software | From | Fixed in |
|---|---|---|
| hummingbird / enterprise_collaboration | 5.2 | 5.2.x |
| hummingbird / enterprise_collaboration | - | 5.21.x |