CVE-2016-6844

Open-Xchange OX App Suite prior to 7.8.2-rev8 is affected by CVE-2016-6844. The issue arises from SVG script content being preserved when files are opened in browser via the Mail/Drive apps; within anchor tags, base64-encoded data references can allow malicious script execution in the user’s cont...