CVE-2021-44209: XSS
Published Mar 28, 2022
·Updated
OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.
Affected Software
1 affected component
Open-Xchange Ox App Suite<=7.10.5
Event History
Mar 28, 2022
CVE Published
via MITRE·12:57 AM
Data Sourced
via MITRE·12:57 AM
Description
Frequently Asked Questions
1
What is CVE-2021-44209?
CVE-2021-44209 is a vulnerability in OX App Suite versions up to and including 7.10.5 that allows cross-site scripting (XSS) attacks via an HTML 5 element like AUDIO.
2
How severe is CVE-2021-44209?
CVE-2021-44209 has a severity rating of 6.1 (medium).
3
How does CVE-2021-44209 affect OX App Suite?
CVE-2021-44209 affects OX App Suite versions up to and including 7.10.5, allowing XSS attacks through the use of HTML 5 elements such as AUDIO.
4
What is the Common Weakness Enumeration (CWE) of CVE-2021-44209?
The Common Weakness Enumeration (CWE) of CVE-2021-44209 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
5
How can I fix CVE-2021-44209?
To fix CVE-2021-44209, it is recommended to update OX App Suite to a version higher than 7.10.5 that includes a patch for this vulnerability.