open-xchange open-xchange appsuite 7.10.6 vulnerabilities and exploits

(subscribe to this query)

NA

OX App Suite up to and including 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 allows XSS via HTML in text/plain e-mail messages.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

OX App Suite up to and including 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.10.5 Open-xchange Open-xchange Appsuite 7.10.6

NA

Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parti...

Open-xchange Open-xchange Appsuite 7.10.6 Open-xchange Open-xchange Appsuite

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook