← Back

CVE-2023-29043

nvd nist
Published: Nov 2, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain actions, like copying content. The relevant attribute does now get encoded to avoid the possibility of executing script code. No publicly available exploits are known.

Affected (43)

1 product
Open Xchange Appsuite
Configuration A
43 vulnerable
Vulnerable SoftwareAffected Versions
Open Xchange
Before 7.10.6
Version 7.10.6
Version 7.10.6 patch_release_6069
Version 7.10.6 patch_release_6073
Version 7.10.6 patch_release_6080
Version 7.10.6 patch_release_6085
Version 7.10.6 patch_release_6093
Version 7.10.6 patch_release_6102
Version 7.10.6 patch_release_6112
Version 7.10.6 patch_release_6121
Version 7.10.6 patch_release_6133
Version 7.10.6 patch_release_6138
Version 7.10.6 patch_release_6141
Version 7.10.6 patch_release_6146
Version 7.10.6 patch_release_6147
Version 7.10.6 patch_release_6148
Version 7.10.6 patch_release_6150
Version 7.10.6 patch_release_6156
Version 7.10.6 patch_release_6161
Version 7.10.6 patch_release_6166
Version 7.10.6 patch_release_6173
Version 7.10.6 patch_release_6176
Version 7.10.6 patch_release_6178
Version 7.10.6 patch_release_6189
Version 7.10.6 patch_release_6194
Version 7.10.6 patch_release_6199
Version 7.10.6 patch_release_6204
Version 7.10.6 patch_release_6205
Version 7.10.6 patch_release_6209
Version 7.10.6 patch_release_6210
Version 7.10.6 patch_release_6214
Version 7.10.6 patch_release_6215
Version 7.10.6 patch_release_6216
Version 7.10.6 patch_release_6218
Version 7.10.6 patch_release_6219
Version 7.10.6 patch_release_6220
Version 7.10.6 patch_release_6227
Version 7.10.6 patch_release_6230
Version 7.10.6 patch_release_6233
Version 7.10.6 patch_release_6235
Version 7.10.6 patch_release_6236
Version 7.10.6 patch_release_6239
Version 7.10.6 patch_release_6241

Timeline

No history available yet.