CVE-2021-26698: XSS
Published Jul 22, 2021
·Updated
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used.
Affected Software
56 affected components
Open-Xchange Open-Xchange AppSuite=7.10.3
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5547
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5572
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5623
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5653
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5677
Open-Xchange Open-Xchange AppSuite=7.10.3-patch_release5720
Open-Xchange Open-Xchange AppSuite=7.10.3-rev1
Open-Xchange Open-Xchange AppSuite=7.10.3-rev10
Open-Xchange Open-Xchange AppSuite=7.10.3-rev11
Open-Xchange Open-Xchange AppSuite=7.10.3-rev12
Open-Xchange Open-Xchange AppSuite=7.10.3-rev13
Open-Xchange Open-Xchange AppSuite=7.10.3-rev14
Open-Xchange Open-Xchange AppSuite=7.10.3-rev15
Open-Xchange Open-Xchange AppSuite=7.10.3-rev16
Open-Xchange Open-Xchange AppSuite=7.10.3-rev17
Open-Xchange Open-Xchange AppSuite=7.10.3-rev18
Open-Xchange Open-Xchange AppSuite=7.10.3-rev19
Open-Xchange Open-Xchange AppSuite=7.10.3-rev2
Open-Xchange Open-Xchange AppSuite=7.10.3-rev20
Open-Xchange Open-Xchange AppSuite=7.10.3-rev21
Open-Xchange Open-Xchange AppSuite=7.10.3-rev22
Open-Xchange Open-Xchange AppSuite=7.10.3-rev23
Open-Xchange Open-Xchange AppSuite=7.10.3-rev24
Open-Xchange Open-Xchange AppSuite=7.10.3-rev25
Open-Xchange Open-Xchange AppSuite=7.10.3-rev26
Open-Xchange Open-Xchange AppSuite=7.10.3-rev27
Open-Xchange Open-Xchange AppSuite=7.10.3-rev28
Open-Xchange Open-Xchange AppSuite=7.10.3-rev29
Open-Xchange Open-Xchange AppSuite=7.10.3-rev3
Open-Xchange Open-Xchange AppSuite=7.10.3-rev30
Open-Xchange Open-Xchange AppSuite=7.10.3-rev31
Open-Xchange Open-Xchange AppSuite=7.10.3-rev4
Open-Xchange Open-Xchange AppSuite=7.10.3-rev5
Open-Xchange Open-Xchange AppSuite=7.10.3-rev6
Open-Xchange Open-Xchange AppSuite=7.10.3-rev7
Open-Xchange Open-Xchange AppSuite=7.10.3-rev8
Open-Xchange Open-Xchange AppSuite=7.10.3-rev9
Open-Xchange Open-Xchange AppSuite=7.10.4
Open-Xchange Open-Xchange AppSuite=7.10.4-rev1
Open-Xchange Open-Xchange AppSuite=7.10.4-rev10
Open-Xchange Open-Xchange AppSuite=7.10.4-rev11
Open-Xchange Open-Xchange AppSuite=7.10.4-rev12
Open-Xchange Open-Xchange AppSuite=7.10.4-rev13
Open-Xchange Open-Xchange AppSuite=7.10.4-rev14
Open-Xchange Open-Xchange AppSuite=7.10.4-rev15
Open-Xchange Open-Xchange AppSuite=7.10.4-rev16
Open-Xchange Open-Xchange AppSuite=7.10.4-rev17
Open-Xchange Open-Xchange AppSuite=7.10.4-rev2
Open-Xchange Open-Xchange AppSuite=7.10.4-rev3
Open-Xchange Open-Xchange AppSuite=7.10.4-rev4
Open-Xchange Open-Xchange AppSuite=7.10.4-rev5
Open-Xchange Open-Xchange AppSuite=7.10.4-rev6
Open-Xchange Open-Xchange AppSuite=7.10.4-rev7
Open-Xchange Open-Xchange AppSuite=7.10.4-rev8
Open-Xchange Open-Xchange AppSuite=7.10.4-rev9
Event History
Jul 22, 2021
CVE Published
via MITRE·04:07 PM
Data Sourced
via MITRE·04:07 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-26698?
CVE-2021-26698 has a medium severity rating due to its potential for XSS attacks.
2
How do I fix CVE-2021-26698?
To fix CVE-2021-26698, upgrade to Open-Xchange App Suite version 7.10.4-rev18 or later.
3
What types of attacks can CVE-2021-26698 facilitate?
CVE-2021-26698 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
4
Which versions of Open-Xchange App Suite are affected by CVE-2021-26698?
CVE-2021-26698 affects Open-Xchange App Suite versions prior to 7.10.4-rev18.
5
How can I identify if my system is vulnerable to CVE-2021-26698?
To identify vulnerability, check if your Open-Xchange App Suite version is earlier than 7.10.4-rev18.