CVE-2013-2583: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL, (2) malformed nested SCRIPT elements, (3) a mail signature, or (4) JavaScript code within an image file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2583?
CVE-2013-2583 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-2583?
To fix CVE-2013-2583, upgrade your Open-Xchange AppSuite or Server to versions 6.20.7 rev16, 6.22.0 rev15, 6.22.1 rev17, 7.0.1 rev6, or 7.0.2 rev7 or later.
Which Open-Xchange versions are affected by CVE-2013-2583?
CVE-2013-2583 affects Open-Xchange AppSuite and Server versions prior to 6.20.7 rev16, 6.22.0 rev15, 6.22.1 rev17, 7.0.1 rev6, and 7.0.2 rev7.
What types of attacks can be executed due to CVE-2013-2583?
CVE-2013-2583 allows remote attackers to execute cross-site scripting (XSS) attacks by injecting arbitrary web scripts or HTML.
Is there a workaround for CVE-2013-2583 if I cannot update immediately?
While the best solution to CVE-2013-2583 is to apply the updates, implementing input validation and escaping output in the application can be a temporary workaround.