Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-41703

User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please de

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avoid potentially malicious content. No publicly available exploits are known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 7.10.6-rev9affected
  • 0 to ≤ 8.19affected

References