CVE-2022-29852

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked...

CVE-2022-29852

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked...

Cross site scripting

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked...

CVE-2022-29852

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked...

CVE-2022-29852

CVE-2022-29852 affects Open-Xchange OX App Suite up to version 8.2. The issue is an XSS vulnerability caused by BMFreehand10 and image/x-freehand not being blocked, enabling cross-site scripting. No exploitation details are provided in the sources beyond this description. Mitigation found in a re...

PT-2022-19879 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 8.2 Description: The issue allows for XSS because BMFreehand10 and image/x-freehand are not blocked. Recommendations: For OX App Suite versions through 8.2, consider blocking BMFreehand10 and image/x-freehand to...