Cross-site scripting in Open-Xchange GmbH OX App Suite
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code execution, allowing an attacker to build a foothold. Sanitization is in place for product names now. No publicly available exploits are known.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Open-Xchange GmbH | OX App Suite | up to 2.10.7-rev6 | — | No fix listed | CNA |
- OX App Suite VendorOpen-Xchange GmbH Affected up to 2.10.7-rev6 Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:open-xchange:ox_guard:*:*:*:*:*:*:*:* | before 2.10.7 | Vulnerable | Open-Xchange GmbH |
| cpe:2.3:a:open-xchange:ox_guard:2.10.7:-:*:*:*:*:*:* | 2.10.7 | Vulnerable | Open-Xchange GmbH |
| cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev4:*:*:*:*:*:* | 2.10.7 rev4 | Vulnerable | Open-Xchange GmbH |
| cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev5:*:*:*:*:*:* | 2.10.7 rev5 | Vulnerable | Open-Xchange GmbH |
| cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev6:*:*:*:*:*:* | 2.10.7 rev6 | Vulnerable | Open-Xchange GmbH |
- cpe:2.3:a:open-xchange:ox_guard:*:*:*:*:*:*:*:* Versions before 2.10.7 Vulnerable ·Open-Xchange GmbH
- cpe:2.3:a:open-xchange:ox_guard:2.10.7:-:*:*:*:*:*:* Versions 2.10.7 Vulnerable ·Open-Xchange GmbH
- cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev4:*:*:*:*:*:* Versions 2.10.7 rev4 Vulnerable ·Open-Xchange GmbH
- cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev5:*:*:*:*:*:* Versions 2.10.7 rev5 Vulnerable ·Open-Xchange GmbH
- cpe:2.3:a:open-xchange:ox_guard:2.10.7:rev6:*:*:*:*:*:* Versions 2.10.7 rev6 Vulnerable ·Open-Xchange GmbH
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
OX App Suite — documentation.open-xchange.com/appsuite/security/advisories…
10 records Highest priority Priority LOW 10 LOW
Other records, highest priority first
- TI-2023-11601 SQL injection in Open-Xchange GmbH OX App SuitePriority LOW 38
- TI-2023-11600 SQL injection in Open-Xchange GmbH OX App SuitePriority LOW 38
- TI-2023-11599 SQL injection in Open-Xchange GmbH OX App SuitePriority LOW 38
Timeline
- 2026-10-02 Threatist record created from CVE-2023-26456
- 2026-10-03 Alias added: GHSA-xmj4-pwxq-wq63
References
More Open-Xchange GmbH Ox Guard vulnerabilities
- TI-2015-07026 An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. CVSS 3.0HIGH 8.8
- TI-2018-07786 OX Guard 2.8.0 has CSRF. CVSS 3.0HIGH 8.8
- TI-2020-17472 OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds… CVSS 3.1HIGH 7.5
- TI-2016-03424 An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. CVSS 3.0HIGH 7.5
- TI-2016-05890 An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. CVSS 3.0MEDIUM 6.1
- TI-2016-05889 An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. CVSS 3.0MEDIUM 6.1
Sources
- CVE-2023-26456 · CVE Program
- CVE-2023-26456 · NVD
- FIRST EPSS
- GHSA-xmj4-pwxq-wq63 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences