CVE-2023-26456

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

CVE-2023-26456

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

CVE-2023-26456

CVE-2023-26456 affects Open-Xchange App Suite/OX Guard. The vulnerability stems from allowing arbitrary input for the product name, which was not sufficiently sanitized when processed in the UI, enabling indirect cross-site scripting and, in scenarios where accounts were temporarily taken over, p...