CVE-2020-24701: XSS
Published Jan 12, 2021
·Updated
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATHINFO to the /appsuite URI).
Affected Software
1 affected component
Open-Xchange Open-Xchange AppSuite<=7.10.4
Event History
Jan 12, 2021
CVE Published
via MITRE·07:58 AM
Data Sourced
via MITRE·07:58 AM
Description
Frequently Asked Questions
1
What is CVE-2020-24701?
CVE-2020-24701 is a vulnerability in OX App Suite through version 7.10.4 that allows Cross-Site Scripting (XSS) attacks via the app loading mechanism.
2
How severe is CVE-2020-24701?
CVE-2020-24701 has a severity rating of medium with a CVSS score of 6.1.
3
How does CVE-2020-24701 affect Open-xchange Open-xchange Appsuite?
CVE-2020-24701 affects Open-xchange Open-xchange Appsuite version up to 7.10.4.
4
How can I fix CVE-2020-24701?
To fix CVE-2020-24701, it is recommended to update OX App Suite to version 7.10.5 or higher.
5
What is the Common Weakness Enumeration (CWE) number associated with CVE-2020-24701?
CVE-2020-24701 is associated with CWE-79 (Cross-Site Scripting).