Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-41704

Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine. Malicious script code could be injected to a users session

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine. Malicious script code could be injected to a users sessions when interacting with E-Mails. Please deploy the provided updates and patch releases. CID handing has been improved and resulting content is checked for malicious content. No publicly available exploits are known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 7.10.6-rev55affected
  • 0 to ≤ 7.6.3-rev71affected
  • 0 to ≤ 8.20affected

References