Product:

Open\-Xchange_appsuite

(Open\-Xchange)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 157
Date Id Summary Products Score Patch Annotated
2021-01-12 CVE-2020-24700 OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring. Open\-Xchange_appsuite 5.4
2021-01-12 CVE-2020-24701 OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI). Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23927 OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request. Open\-Xchange_appsuite 6.4
2021-01-12 CVE-2021-23928 OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23929 OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23930 OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23931 OX App Suite through 7.10.4 allows XSS via an inline binary file. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23932 OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23933 OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL. Open\-Xchange_appsuite 6.1
2021-01-12 CVE-2021-23934 OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code. Open\-Xchange_appsuite 6.1