OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23100.json"