CVE-2021-23929

CVE-2021-23929 affects OX App Suite up to version 7.10.4. The issue is a cross-site scripting (XSS) vulnerability caused by a crafted Content-Disposition header in an HTML document uploaded to the URI ajax/share/?delivery=view. This header-based payload can lead to script execution in the context...