CVE-2021-23929 - Open-xchange Open-xchange Appsuite

Moderate 6.1

OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.

Affected software

Open-xchange Open-xchange Appsuite

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.