CVE-2022-37309: XSS
Published Dec 26, 2022
·Updated
OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.
Affected Software
53 affected components
Open-Xchange Open-Xchange AppSuite<7.10.5
Open-Xchange Open-Xchange AppSuite=7.10.5
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5961
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5973
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5976
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5982
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5989
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_5994
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6000
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6003
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6008
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6010
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6016
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6020
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6026
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6029
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6034
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6035
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6038
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6046
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6051
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6053
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6060
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6061
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6066
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6068
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6072
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6079
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6084
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6092
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6101
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6111
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6120
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6132
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6137
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6140
Open-Xchange Open-Xchange AppSuite=7.10.5-patch_release_6149
Open-Xchange Open-Xchange AppSuite=7.10.6
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6069
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6073
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6080
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6085
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6093
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6102
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6112
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6121
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6133
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6138
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6141
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6146
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6147
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6148
Open-Xchange Open-Xchange AppSuite=7.10.6-patch_release_6150
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-37309?
CVE-2022-37309 has been classified as a medium severity vulnerability due to its potential impact on user security.
2
How do I fix CVE-2022-37309?
To address CVE-2022-37309, it is recommended to upgrade to Open-Xchange App Suite version 7.10.7 or later.
3
What type of vulnerability is CVE-2022-37309?
CVE-2022-37309 is classified as a Cross-Site Scripting (XSS) vulnerability.
4
Who is affected by CVE-2022-37309?
CVE-2022-37309 affects users of Open-Xchange App Suite versions 7.10.5 and below.
5
What are the potential consequences of CVE-2022-37309?
Exploitation of CVE-2022-37309 could allow attackers to inject malicious scripts into user interactions if the vulnerability is not remediated.