Lucene search

[email protected]NVD:CVE-2022-29852

HistoryDec 26, 2022 - 4:15 a.m.

CVE-2022-29852

2022-12-2604:15:10

CWE-79

[email protected]

web.nvd.nist.gov

xss vulnerability

ox app suite

cve-2022-29852

image/x-freehand

bmfreehand10

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.2%

JSON

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.

Affected configurations

Nvd

Node

open-xchangeopen-xchange_appsuiteRange<7.10.5

open-xchangeopen-xchange_appsuiteRange8.2–8.2.324

open-xchangeopen-xchange_appsuiteMatch7.10.5-

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5961

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5973

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5976

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5982

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5989

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5994

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6000

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6003

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6008

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6010

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6016

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6020

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6026

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6029

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6034

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6035

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6038

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6046

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6051

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6053

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6060

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6061

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6066

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6068

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6072

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6079

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6084

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6092

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6101

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6111

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6120

open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6132

open-xchangeopen-xchange_appsuiteMatch7.10.6-

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6069

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6073

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6080

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6085

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6093

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6102

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6112

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6121

open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6133

VendorProductVersionCPE
open-xchangeopen-xchange_appsuite*cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:-:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5961:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5973:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5976:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5982:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5989:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5994:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6000:*:*:*:*:*:*
open-xchangeopen-xchange_appsuite7.10.5cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6003:*:*:*:*:*:*

Vendor	Product	Version	CPE
open-xchange	open-xchange_appsuite	*	cpe:2.3:a:open-xchange:open-xchange_appsuite::::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:-::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5961::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5973::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5976::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5982::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5989::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_5994::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6000::::::
open-xchange	open-xchange_appsuite	7.10.5	cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.5:patch_release_6003::::::

Rows per page:

1-10 of 441

References

open-xchange.com

seclists.org/fulldisclosure/2022/Sep/0