PT-2021-20152
CVE-2021-33490
·
تاريخ النشر
2021-11-22
·
تاريخ التحديث
2021-11-23
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OX App Suite versions 7.10.5 and earlier
Description
The issue allows for cross-site scripting (XSS) attacks via a crafted snippet in a shared mail signature. This can potentially lead to malicious scripts being executed on users' browsers, compromising their session data or performing unauthorized actions.
Recommendations
For OX App Suite versions 7.10.5 and earlier, update to a version later than 7.10.5 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾