CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-12-26

Last modified

2025-04-14

Weaknesses

CWE-79

Affected products

• Open-xchange Appsuite (Open-xchange)

References

• https://open-xchange.com
• https://seclists.org/fulldisclosure/2022/Nov/18