CVE-2021-33488

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

CVE-2021-38375: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message...

CVE-2021-33493: Improper Control of Generation of Code

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format...

Open-xchange OX App Suite 跨站脚本漏洞

Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...

Open-xchange OX App Suite 跨站脚本漏洞

Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...

OX App Suite / Ox Documents 7.10.x XSS / Code Injection / Traversal

Product: OX App Suite, OX Documents Vendor: OX Software GmbH Internal reference: MWB-993 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.3-rev35,...

CVE-2021-33488: Improper Input Validation

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook...

CVE-2021-33490: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...

CVE-2021-33495: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.5 allows XSS via an OX Chat system message...

PT-2021-20156

Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows for XSS via an OX Chat room title during typing rendering. This means that an attacker could potentially inject malicious scripts into the chat room title, which would then be executed b...

PT-2021-20153

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.5 Description The issue arises from the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records, allowing Directory Traversal via ../ in an OOXML or ODF ZIP archive...

CVE-2021-38376: Improper Authentication

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call...

PT-2021-20157

Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows for XSS via an OX Chat system message. Recommendations For OX App Suite version 7.10.5, at the moment, there is no information about a newer version that contains a fix for this...

PT-2021-22090

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue is related to Incorrect Access Control, allowing for the retrieval of session information via the "rampup action" of the "login API call". This could potentially lead to unauthoriz...

PT-2021-20149

Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue is related to improper input validation in the chat function of OX App Suite. This allows a user to be redirected to a rogue OX Chat server via a development-related hook. Recommendations For O...

CVE-2021-33494: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering...

PT-2021-20152

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via a crafted snippet in a shared mail signature. This can potentially lead to malicious scripts being executed on users' browsers,...

CVE-2021-38377: Use of Insufficiently Random Values

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results...

OX App Suite / Ox Documents 7.10.x XSS / Code Injection / Traversal Vulnerability

OX App Suite and OX Documents suffer from cross site scripting, code injection, path traversal, and input validation vulnerabilities. Most of these issues affect 7.10.5 and below with one affecting 7.10.4 and below. Product: OX App Suite, OX Documents Vendor: OX Software GmbH Internal reference:...

Open-xchange OX App Suite 安全特征问题特征问题漏洞

Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by...