First published: Mon Mar 28 2022(Updated: )
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Open-xchange Ox App Suite | <=7.10.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-44209 is a vulnerability in OX App Suite versions up to and including 7.10.5 that allows cross-site scripting (XSS) attacks via an HTML 5 element like AUDIO.
CVE-2021-44209 has a severity rating of 6.1 (medium).
CVE-2021-44209 affects OX App Suite versions up to and including 7.10.5, allowing XSS attacks through the use of HTML 5 elements such as AUDIO.
The Common Weakness Enumeration (CWE) of CVE-2021-44209 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
To fix CVE-2021-44209, it is recommended to update OX App Suite to a version higher than 7.10.5 that includes a patch for this vulnerability.