Cross site scripting

2021-07-2217:15:00

PRIOn knowledge base

www.prio-n.com

0.004 Low

EPSS

Percentile

72.2%

JSON

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used.

CPENameOperatorVersion
open-xchange_appsuiteeq7.10.3 rev1
open-xchange_appsuiteeq7.10.3 rev2
open-xchange_appsuiteeq7.10.3 rev3
open-xchange_appsuiteeq7.10.3 rev4
open-xchange_appsuiteeq7.10.3 rev5
open-xchange_appsuiteeq7.10.3 rev6
open-xchange_appsuiteeq7.10.3
open-xchange_appsuiteeq7.10.3 rev18
open-xchange_appsuiteeq7.10.3 rev19
open-xchange_appsuiteeq7.10.3 rev20

Name	Operator	Version
open-xchange_appsuite	eq	7.10.3 rev1
open-xchange_appsuite	eq	7.10.3 rev2
open-xchange_appsuite	eq	7.10.3 rev3
open-xchange_appsuite	eq	7.10.3 rev4
open-xchange_appsuite	eq	7.10.3 rev5
open-xchange_appsuite	eq	7.10.3 rev6
open-xchange_appsuite	eq	7.10.3
open-xchange_appsuite	eq	7.10.3 rev18
open-xchange_appsuite	eq	7.10.3 rev19
open-xchange_appsuite	eq	7.10.3 rev20