PT-2023-22109 · Ox Software Gmbh+1 · Ox App Suite+2

CVE-2023-29045

·

Publicado

2023-11-02

·

Atualizado

2024-01-12

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.
Description Documents operations, specifically "drawing", could be manipulated to contain invalid data types, possibly script code. This script code could be injected into an operation that would be executed for users actively collaborating on the same document. To avoid code execution, operation data exchanged between collaborating parties is now checked for validity. No publicly available exploits are known.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-29045

Produtos afetados

Ox App Suite
Open-Xchange
Open-Xchange Appsuite