CVE-2022-37310

OX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-12-26

Last modified

2025-04-14

Weaknesses

CWE-79

Affected products

• Open-xchange Appsuite (Open-xchange)

References

• https://open-xchange.com
• https://seclists.org/fulldisclosure/2022/Nov/18