← Back

CVE-2023-41703

nvd nist
Published: Feb 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avoid potentially malicious content. No publicly available exploits are known.

Affected (51)

1 product
Open Xchange Appsuite
Configuration A
51 vulnerable
Vulnerable SoftwareAffected Versions
Open Xchange
Before 7.10.6
After 7.10.6 to 8.20
Version 7.10.6
Version 7.10.6 patch_release_6069
Version 7.10.6 patch_release_6073
Version 7.10.6 patch_release_6080
Version 7.10.6 patch_release_6085
Version 7.10.6 patch_release_6093
Version 7.10.6 patch_release_6102
Version 7.10.6 patch_release_6112
Version 7.10.6 patch_release_6121
Version 7.10.6 patch_release_6133
Version 7.10.6 patch_release_6138
Version 7.10.6 patch_release_6141
Version 7.10.6 patch_release_6146
Version 7.10.6 patch_release_6147
Version 7.10.6 patch_release_6148
Version 7.10.6 patch_release_6150
Version 7.10.6 patch_release_6156
Version 7.10.6 patch_release_6161
Version 7.10.6 patch_release_6166
Version 7.10.6 patch_release_6173
Version 7.10.6 patch_release_6176
Version 7.10.6 patch_release_6178
Version 7.10.6 patch_release_6189
Version 7.10.6 patch_release_6194
Version 7.10.6 patch_release_6199
Version 7.10.6 patch_release_6204
Version 7.10.6 patch_release_6205
Version 7.10.6 patch_release_6209
Version 7.10.6 patch_release_6210
Version 7.10.6 patch_release_6214
Version 7.10.6 patch_release_6215
Version 7.10.6 patch_release_6216
Version 7.10.6 patch_release_6218
Version 7.10.6 patch_release_6219
Version 7.10.6 patch_release_6220
Version 7.10.6 patch_release_6227
Version 7.10.6 patch_release_6230
Version 7.10.6 patch_release_6233
Version 7.10.6 patch_release_6235
Version 7.10.6 patch_release_6236
Version 7.10.6 patch_release_6239
Version 7.10.6 patch_release_6241
Version 7.10.6 patch_release_6243
Version 7.10.6 patch_release_6245
Version 7.10.6 patch_release_6248
Version 7.10.6 patch_release_6249
Version 7.10.6 patch_release_6250
Version 7.10.6 patch_release_6251
Version 7.10.6 patch_release_6255

Timeline

No history available yet.