CVE-2023-41710

open-xchange ox app suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-41710

Katalog CVE

CVSS 5.4 · Medium EPSS 0,44%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada open-xchange ox app suite. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when adding it to DOM. Attackers could lure victims to user accounts with malicious script code and make them execute it in the context of a trusted domain. We added sanitization for this content. No publicly available exploits are known.

Rincian

Terbit di NVD
8 Januari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,44% peluang dieksploitasi; lebih tinggi dari 36,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange ox app suite Semua versi sebelum 7.10.6
open-xchange ox app suite Versi 7.10.6
open-xchange ox app suite Versi 7.10.6 rev01
open-xchange ox app suite Versi 7.10.6 rev02
open-xchange ox app suite Versi 7.10.6 rev03
open-xchange ox app suite Versi 7.10.6 rev04
open-xchange ox app suite Versi 7.10.6 rev05
open-xchange ox app suite Versi 7.10.6 rev06
open-xchange ox app suite Versi 7.10.6 rev07
open-xchange ox app suite Versi 7.10.6 rev08
open-xchange ox app suite Versi 7.10.6 rev09
open-xchange ox app suite Versi 7.10.6 rev10
open-xchange ox app suite Versi 7.10.6 rev11
open-xchange ox app suite Versi 7.10.6 rev12
open-xchange ox app suite Versi 7.10.6 rev13
open-xchange ox app suite Versi 7.10.6 rev14
open-xchange ox app suite Versi 7.10.6 rev15
open-xchange ox app suite Versi 7.10.6 rev16
open-xchange ox app suite Versi 7.10.6 rev17
open-xchange ox app suite Versi 7.10.6 rev18
open-xchange ox app suite Versi 7.10.6 rev19
open-xchange ox app suite Versi 7.10.6 rev20
open-xchange ox app suite Versi 7.10.6 rev21
open-xchange ox app suite Versi 7.10.6 rev22
open-xchange ox app suite Versi 7.10.6 rev23
open-xchange ox app suite Versi 7.10.6 rev24
open-xchange ox app suite Versi 7.10.6 rev25
open-xchange ox app suite Versi 7.10.6 rev26
open-xchange ox app suite Versi 7.10.6 rev27
open-xchange ox app suite Versi 7.10.6 rev28
open-xchange ox app suite Versi 7.10.6 rev29
open-xchange ox app suite Versi 7.10.6 rev30
open-xchange ox app suite Versi 7.10.6 rev31
open-xchange ox app suite Versi 7.10.6 rev32
open-xchange ox app suite Versi 7.10.6 rev33
open-xchange ox app suite Versi 7.10.6 rev34

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.