CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33488

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

Input validation

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

Design/Logic Flaw

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

Design/Logic Flaw

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33491

OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records...

CVE-2021-33491

OX App Suite (Open-Xchange) up to version 7.10.5 is affected by a Directory Traversal vulnerability triggered by ../ in OOXML/ODF ZIP archives, stemming from mishandling of relative paths in mail addresses with auto-configuration DNS records. The issue allows traversal in archives and could enabl...

CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33490

OX App Suite (7.10.x) is affected by CVE-2021-33490: cross-site scripting via crafted snippets in shared mail signatures. Root cause involves sanitization bypass for certain image formats, allowing injected HTML/JS to run in a user’s context. Exploitation described as requiring the user to follow...

CVE-2021-33490

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33489

OX App Suite (Open-Xchange) 7.10.x suffers a cross-site scripting vulnerability (CVE-2021-33489) via JavaScript in shared XCF files. The root cause is a sanitization bypass for certain image formats in which HTML/JS can be injected and executed in a user’s context. Affected versions are 7.10.5 an...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33488

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

CVE-2021-33488

OX App Suite 7.10.5 chat component has an input validation issue that can redirect a user to a rogue OX Chat server via a development-related hook. Affected product: OX App Suite (and OX Documents’s backend chat-related flow). Root cause: improper input validation in chat-related handling. Impact...