Cross site scripting

2014-09-1714:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.5%

JSON

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name.

CPENameOperatorVersion
open-xchange_appsuiteeq6.22.1
open-xchange_appsuitele7.4.1
open-xchange_appsuiteeq6.22.0
open-xchange_appsuiteeq7.6.0
open-xchange_appsuiteeq7.0.1
open-xchange_appsuiteeq7.2.2
open-xchange_appsuiteeq7.0.2
open-xchange_appsuiteeq7.4.0
open-xchange_appsuiteeq7.2.0
open-xchange_appsuiteeq7.2.1

Name	Operator	Version
open-xchange_appsuite	eq	6.22.1
open-xchange_appsuite	le	7.4.1
open-xchange_appsuite	eq	6.22.0
open-xchange_appsuite	eq	7.6.0
open-xchange_appsuite	eq	7.0.1
open-xchange_appsuite	eq	7.2.2
open-xchange_appsuite	eq	7.0.2
open-xchange_appsuite	eq	7.4.0
open-xchange_appsuite	eq	7.2.0
open-xchange_appsuite	eq	7.2.1