CVE-2022-29853: XSS
Published Dec 26, 2022
·Updated
OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message.
Affected Software
45 affected components
Open-Xchange Open-Xchange AppSuite<7.10.5
Open-Xchange Open-Xchange AppSuite=7.10.5
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5961
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5973
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5976
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5982
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5989
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5994
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6000
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6003
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6008
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6010
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6016
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6020
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6026
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6029
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6034
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6035
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6038
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6046
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6051
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6053
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6060
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6061
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6066
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6068
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6072
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6079
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6084
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6092
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6101
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6111
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6120
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6132
Open-Xchange Open-Xchange AppSuite=7.10.6
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6069
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6073
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6080
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6085
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6093
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6102
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6112
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6121
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6133
Open-Xchange Open-Xchange AppSuite=8.2
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-29853?
The severity of CVE-2022-29853 is rated as medium with a CVSS score of 5.4.
2
How does CVE-2022-29853 impact OX App Suite versions?
CVE-2022-29853 impacts OX App Suite versions up to 8.2.
3
What vulnerability does CVE-2022-29853 pose in OX App Suite?
CVE-2022-29853 poses a cross-site scripting (XSS) vulnerability in OX App Suite.
4
Is there a patch available to address CVE-2022-29853 in Open-Xchange Open-Xchange Appsuite?
Yes, there are patches available to address CVE-2022-29853 in Open-Xchange Open-Xchange Appsuite.
5
Where can I find more information about CVE-2022-29853?
More information about CVE-2022-29853 can be found at the Open-Xchange website and on the seclists.org security mailing list.