Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite prior to 7.2.2-rev31, 7.4.0 prior to 7.4.0-rev27, and 7.4.1 prior to 7.4.1-rev17 allows remote malicious users to inject arbitrary web script or HTML via the header in an attached SVG file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
open-xchange open-xchange appsuite |
||
open-xchange open-xchange appsuite 7.4.0 |
||
open-xchange open-xchange appsuite 7.4.1 |