TI-2023-22128 CVE-2023-41710 · GHSA-9rm8-w7j5-j66w
Cross-site scripting in Open-Xchange GmbH OX App Suite
Priority LOW 25
User-defined script code could be stored for a upsell related shop URL.
Vulnerabilities
3 records
Advisory: Open-Xchange OX App Suite — documentation.open-xchange.com/appsuite/security/advisories… Clear all filters
TI-2023-13502 CVE-2023-29052 · GHSA-xr84-qwr9-vj33
Cross-site scripting in Open-Xchange GmbH OX App Suite
Priority LOW 25
Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitized correctly.
TI-2023-13501 CVE-2023-29051 · GHSA-hwrv-r72x-jcwr
Improper access control in Open-Xchange GmbH OX App Suite
Priority LOW 36
User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API.