Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 prior to 7.4.1-rev11 and 7.4.2 prior to 7.4.2-rev13 allows remote malicious users to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an e-mail attachment.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
open-xchange open-xchange appsuite 7.4.2 |
||
open-xchange open-xchange appsuite 7.4.1 |
||
open-xchange open-xchange appsuite |
||
open-xchange open-xchange appsuite 7.2.0 |
||
open-xchange open-xchange appsuite 7.2.1 |
Vulmon