EUVD-2023-32656

Malicious code in bioql PyPI...

CVE-2023-29052

Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitized correctly. Attackers could lure victims to user accounts with malicious script code and make them execute it in the context of a trusted domain. We added sanitization for thi...

CVE-2023-29052

The CVE-2023-29052 issue is an Open-Xchange App Suite frontend cross-site scripting vulnerability arising from disclaimer texts in an upsell dialog that could contain unsanitized script code. Affected component: App Suite frontend (notably Open-Xchange App Suite frontend version 7.10.6-rev34 per ...