PT-2014-3245 · Open Xchange · Open-Xchange Appsuite

Publicado 2014-01-09 · Atualizado 2018-10-09 · CVE-2013-6997

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.4.0 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via specific means, including HTML emails with crafted CSS code containing wildcards or office documents containing crafted hyperlinks with script URL handlers.

Recommendations For Open-Xchange AppSuite versions 7.4.0 and earlier, update to a version later than 7.4.0 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-6997

Produtos afetados

Open-Xchange Appsuite

Referências · 9

• http://securityfocus.com/bid/64676 · Nota
• http://securityfocus.com/archive/1/530681/100/0/threaded · Nota
• http://osvdb.org/101715 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90113 · Nota
• http://software.open-xchange.com/OX6/doc/Release_Notes_for_Public_Patch_Release_1766_7.4.0_Rev21_2013_12_13.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-6997 · Nota de Segurança
• http://osvdb.org/101714 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6997 · Nota
• http://securitytracker.com/id/1029554 · Nota