PT-2021-15618
CVE-2021-23932
·
Published
2021-01-12
·
Updated
2021-01-14
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
OX App Suite versions 7.10.4 and earlier
Description:
The issue allows for cross-site scripting (XSS) attacks via an inline image with a crafted filename. This means an attacker could potentially inject malicious scripts into a website, affecting users who view the crafted image.
Recommendations:
For OX App Suite versions 7.10.4 and earlier, update to a version later than 7.10.4 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾