CVE-2021-23932: XSS
Published Jan 12, 2021
·Updated
OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.
Affected Software
1 affected component
Open-Xchange Open-Xchange AppSuite<=7.10.3
Event History
Jan 12, 2021
CVE Published
via MITRE·09:25 PM
Data Sourced
via MITRE·09:25 PM
Description
Frequently Asked Questions
1
What is vulnerability CVE-2021-23932?
CVE-2021-23932 is a Cross-Site Scripting (XSS) vulnerability in OX App Suite through version 7.10.4.
2
How does CVE-2021-23932 impact OX App Suite?
CVE-2021-23932 allows for XSS attacks via an inline image with a crafted filename, potentially leading to unauthorized access or information theft.
3
Which version of OX App Suite is affected by CVE-2021-23932?
OX App Suite versions up to and including 7.10.4 are affected by CVE-2021-23932.
4
What is the severity of CVE-2021-23932?
CVE-2021-23932 has a severity value of 6.1, indicating a medium severity.
5
How can I mitigate the CVE-2021-23932 vulnerability?
To mitigate CVE-2021-23932, it is recommended to update OX App Suite to version 7.10.5 or later, which includes a fix for the vulnerability.