CVE-2022-23099

OX App Suite up to version 7.10.6 is affected by a cross-site scripting (XSS) vulnerability caused by forcing block-wise read, enabling script execution in the context of the affected application. Affected: OX App Suite 7.10.6 and earlier. Root cause: bypass of HTML cleanup/filtering via block-by...

CVE-2014-5237

Open-Xchange App Suite (documentconverter) is affected by CVE-2014-5237. The vulnerability allows Server-Side Request Forgery (SSRF) via a URL embedded in an image within a Text document, which is not correctly handled by the image preview. Affected versions are Open-Xchange App Suite before 7.4....