CVE-2013-7143: XSS
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7143?
CVE-2013-7143 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-7143?
To fix CVE-2013-7143, update Open-Xchange AppSuite to a version later than 7.4.1 or apply any available patches provided by Open-Xchange.
What effects does CVE-2013-7143 have on affected systems?
CVE-2013-7143 allows attackers to inject arbitrary web scripts or HTML, which can compromise user sessions and steal sensitive information.
Which versions of Open-Xchange AppSuite are affected by CVE-2013-7143?
CVE-2013-7143 affects Open-Xchange AppSuite versions 6.20.7 through 7.4.1.
Can CVE-2013-7143 be exploited by unauthenticated users?
Yes, CVE-2013-7143 can be exploited by unauthenticated users since it involves injection through mail filter rules.