Open-Xchange: Set Cookie Via SVG

Summary: ======== An attacker could set any cookie to the victim via svg file that he uploads as his profile picture. Steps to reproduce: ============== 1. My contact Detail. 2. Upload the given svg file as profile picture and save. 3. Logout and Clear all the cookie. 4. Login with victim's...