CVE-2023-24601

OX App Suite before frontend 7.10.6-rev24 allows XSS via a non-app deeplink such as the jslob API's registry sub-tree.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-05-29

Last modified

2025-01-14

Weaknesses

CWE-79

Affected products

• Ox App Suite (Open-xchange)

References

• http://seclists.org/fulldisclosure/2023/May/3
• https://open-xchange.com