CVE-2018-5754

Published: Jun 16, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote attackers to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to the clipboard.

Affected (14)

Products: Open Xchange: Open Xchange Appsuite

Open Xchange

1 product

Open Xchange Appsuite

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Appsuite	Up to 7.8.3
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev10
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev11
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev5
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev6
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev8
Open Xchange Open Xchange Appsuite	Version 7.8.3 rev9
Open Xchange Open Xchange Appsuite	Version 7.8.4
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev3
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev4
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev5
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev6
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev7
Open Xchange Open Xchange Appsuite	Version 7.8.4 rev8