CVE-2023-24602: XSS
Published May 29, 2023
·Updated
OX App Suite before frontend 7.10.6-rev24 allows XSS via data to the Tumblr portal widget, such as a post title.
Affected Software
25 affected components
Open-Xchange Ox App Suite<7.10.6
Open-Xchange Ox App Suite=7.10.6
Open-Xchange Ox App Suite=7.10.6-rev01
Open-Xchange Ox App Suite=7.10.6-rev02
Open-Xchange Ox App Suite=7.10.6-rev03
Open-Xchange Ox App Suite=7.10.6-rev04
Open-Xchange Ox App Suite=7.10.6-rev05
Open-Xchange Ox App Suite=7.10.6-rev06
Open-Xchange Ox App Suite=7.10.6-rev07
Open-Xchange Ox App Suite=7.10.6-rev08
Open-Xchange Ox App Suite=7.10.6-rev09
Open-Xchange Ox App Suite=7.10.6-rev10
Open-Xchange Ox App Suite=7.10.6-rev11
Open-Xchange Ox App Suite=7.10.6-rev12
Open-Xchange Ox App Suite=7.10.6-rev13
Open-Xchange Ox App Suite=7.10.6-rev14
Open-Xchange Ox App Suite=7.10.6-rev15
Open-Xchange Ox App Suite=7.10.6-rev16
Open-Xchange Ox App Suite=7.10.6-rev17
Open-Xchange Ox App Suite=7.10.6-rev18
Open-Xchange Ox App Suite=7.10.6-rev19
Open-Xchange Ox App Suite=7.10.6-rev20
Open-Xchange Ox App Suite=7.10.6-rev21
Open-Xchange Ox App Suite=7.10.6-rev22
Open-Xchange Ox App Suite=7.10.6-rev23
Event History
May 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-24602?
The severity of CVE-2023-24602 is medium with a CVSS score of 6.1.
2
How does CVE-2023-24602 affect Open-xchange Ox App Suite?
CVE-2023-24602 affects Open-xchange Ox App Suite versions 7.10.6-rev01 to 7.10.6-rev23.
3
What is the vulnerability type of CVE-2023-24602?
CVE-2023-24602 is a Cross-Site Scripting (XSS) vulnerability.
4
How can I fix CVE-2023-24602?
To fix CVE-2023-24602, update Open-xchange Ox App Suite to version 7.10.6-rev24 or later.
5
Are there any references for CVE-2023-24602?
Yes, you can find more information about CVE-2023-24602 at the following links: [https://open-xchange.com](https://open-xchange.com) and [http://seclists.org/fulldisclosure/2023/May/3](http://seclists.org/fulldisclosure/2023/May/3).