PT-2023-19703 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev24 Description: The issue allows for XSS via a non-app deeplink, such as the jslob API's registry sub-tree. Recommendations: For versions prior to 7.10.6-rev24, update to version 7.10.6-rev24 or later ...