PT-2021-17096

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.3-rev32 OX App Suite version 7.10.4 prior to 7.10.4-rev18 Description The issue allows for XSS via a code snippet, specifically user-generated content, when a sharing link is created and the dl parameter is...

CVE-2021-26698: Improper Neutralization of Input During Web Page Generation

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet user-generated content when a sharing link is created and the dl parameter is used...

PT-2021-17097

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.3-rev4 OX App Suite versions prior to 7.10.4-rev4 Description The issue allows for Server-Side Request Forgery SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png...

CVE-2021-37403: Improper Neutralization of Input During Web Page Generation

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet user-generated content when a sharing link is created and an App Loader relative URL is used...

PT-2021-21636

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.3-rev32 OX App Suite version 7.10.4 prior to 7.10.4-rev18 Description The issue allows for XSS via binary data that is mishandled when the legacy data retrieval endpoint has been enabled. Recommendations For...

PT-2021-21637

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.3 before rev32 OX App Suite versions 7.10.4 before rev18 Description The issue allows for XSS via a code snippet, which is user-generated content, when a sharing link is created and an App Loader relative URL is used...

CVE-2021-37402: Improper Neutralization of Input During Web Page Generation

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled...

Open-xchange OX App Suite 跨站脚本漏洞

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to more intuitively manage email, tasks, files, and more. A cross-site scripting vulnerability exists in OX App Suite, which stems from an XSS vulnerability...

Open-xchange OX App Suite code issue vulnerability (CNVD-2022-28453)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A code issue vulnerability exists in Open-xchange OX App Suite, no detailed vulnerability details are...

Open-xchange OX Documents 加密问题漏洞

Open-xchange OX Documents is an office software suite from the American company Open-xchange. The product supports the creation and editing of text documents, spreadsheets, presentations, and more. Open-xchange OX Documents is vulnerable to an encryption issue that arises from a lack of...

Open-xchange OX Documents 加密问题漏洞

Open-xchange OX Documents is an office software suite from the American company Open-xchange. The product supports the creation and editing of text documents, spreadsheets, presentations, and more. OX Documents suffers from an encryption issue vulnerability that arises from incorrect access contr...

Open-xchange OX Documents 加密问题漏洞

Open-xchange OX Documents is an office software suite from the American company Open-xchange. The product supports the creation and editing of text documents, spreadsheets, presentations, and more. OX Documents is vulnerable to a cryptographic issue that arises from a lack of authentication...

Open-xchange OX App Suite 跨站脚本漏洞

Open-Xchange OX App Suite is an e-mail client software from Open-Xchange Germany. Open-Xchange OX App Suite suffers from a security vulnerability, no details of the vulnerability are provided at this time...

OX App Suite / OX Guard / OX Documents SSRF / Cross Site Scripting

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX AppSuite, Dovecot and PowerDNS at HackerOne. Note that some bugfixes MWB-423, MWB-460, MWB-492,...

CVE-2020-28945

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as !http://onerror=Function.constructor, in a Notes item...

CVE-2020-28945

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as !http://onerror=Function.constructor, in a Notes item...

Design/Logic Flaw

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as !http://onerror=Function.constructor, in a Notes item...

CVE-2020-28945

OX App Suite, affected versions 7.10.4 and earlier, contains a frontend XSS vulnerability (CVE-2020-28945) introduced by improper handling of crafted content in a Notes item, enabling script execution in a user’s browser context when search results return malicious data. The issue affects the web...

CVE-2020-28945

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as !http://onerror=Function.constructor, in a Notes item...

PT-2021-11605

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for XSS via crafted content to reach an undocumented feature. This can be achieved by using specific syntax, such as , in a Notes item. Recommendations: For OX App Suite...