CVE-2021-23934

OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code.
References
Link Resource
https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html Not Applicable Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*

History

14 Jan 2021, 20:45

Type Values Removed Values Added
References (MISC) https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html - (MISC) https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html - Not Applicable, Third Party Advisory, VDB Entry
CPE cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 6.1
CWE CWE-79

12 Jan 2021, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-01-12 22:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-23934

Mitre link : CVE-2021-23934

CVE.ORG link : CVE-2021-23934


JSON object : View

Products Affected

open-xchange

  • open-xchange_appsuite
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')