CVE-2016-6847

Open-Xchange OX App Suite prior to 7.8.2-rev8 is affected by CVE-2016-6847. The issue allows an attacker to embed script-enabled SVG files used as mp3 album covers; if the SVG XML includes script code, it may execute when the related cover URL is accessed, enabling code execution in the user’s br...