CVE-2021-37402

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 22-07-2021 07:15

Last modified: - 10-02-2022 06:57

Total changes: - 3

Description

OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that is mishandled when the legacy dataretrieval endpoint has been enabled.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

None

Privileges required

Changed

Scope

Required

User interaction

6.1

Base score

2.8

2.7

Exploitability score

Impact score

Verification logic

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=-

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5547

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5572

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5623

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5653

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5677

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=patch_release5720

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev1

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev10

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev11

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev12

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev13

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev14

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev15

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev16

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev17

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev18

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev19

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev2

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev20

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev21

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev22

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev23

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev24

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev25

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev26

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev27

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev28

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev29

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev3

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev30

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev31

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev4

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev5

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev6

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev7

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev8

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.3 AND update=rev9

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=-

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev1

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev10

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev11

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev12

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev13

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev14

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev15

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev16

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev17

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev2

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev3

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev4

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev5

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev6

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev7

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev8

vendor=open-xchange AND product=open-xchange_appsuite AND version=7.10.4 AND update=rev9

Reference

Keywords

CVE-2021-37402

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-37402

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures