← Back

CVE-2022-29853

nvd nist
Published: Dec 26, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD

Description

OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message.

Affected (45)

1 product
Open Xchange Appsuite
Configuration A
45 vulnerable
Vulnerable SoftwareAffected Versions
Open Xchange
Before 7.10.5
Version 7.10.5
Version 7.10.5 patch_release_5961
Version 7.10.5 patch_release_5973
Version 7.10.5 patch_release_5976
Version 7.10.5 patch_release_5982
Version 7.10.5 patch_release_5989
Version 7.10.5 patch_release_5994
Version 7.10.5 patch_release_6000
Version 7.10.5 patch_release_6003
Version 7.10.5 patch_release_6008
Version 7.10.5 patch_release_6010
Version 7.10.5 patch_release_6016
Version 7.10.5 patch_release_6020
Version 7.10.5 patch_release_6026
Version 7.10.5 patch_release_6029
Version 7.10.5 patch_release_6034
Version 7.10.5 patch_release_6035
Version 7.10.5 patch_release_6038
Version 7.10.5 patch_release_6046
Version 7.10.5 patch_release_6051
Version 7.10.5 patch_release_6053
Version 7.10.5 patch_release_6060
Version 7.10.5 patch_release_6061
Version 7.10.5 patch_release_6066
Version 7.10.5 patch_release_6068
Version 7.10.5 patch_release_6072
Version 7.10.5 patch_release_6079
Version 7.10.5 patch_release_6084
Version 7.10.5 patch_release_6092
Version 7.10.5 patch_release_6101
Version 7.10.5 patch_release_6111
Version 7.10.5 patch_release_6120
Version 7.10.5 patch_release_6132
Version 7.10.6
Version 7.10.6 patch_release_6069
Version 7.10.6 patch_release_6073
Version 7.10.6 patch_release_6080
Version 7.10.6 patch_release_6085
Version 7.10.6 patch_release_6093
Version 7.10.6 patch_release_6102
Version 7.10.6 patch_release_6112
Version 7.10.6 patch_release_6121
Version 7.10.6 patch_release_6133
Version 8.2

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.