Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-23192

RSS feeds that contain malicious data- attributes could be abused to inject script code to a users browser session when reading compromised RSS feeds or successfully luring users t

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

RSS feeds that contain malicious data- attributes could be abused to inject script code to a users browser session when reading compromised RSS feeds or successfully luring users to compromised accounts. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. Potentially malicious attributes now get removed from external RSS content. No publicly available exploits are known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open-Xchange GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 7.10.6-rev40affected
  • 0 to ≤ 7.6.3-rev54affected
  • 0 to ≤ 8.20affected

References