PT-2021-20152

CVE-2021-33490

·

Published

2021-11-22

·

Updated

2021-11-23

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier
Description The issue allows for cross-site scripting (XSS) attacks via a crafted snippet in a shared mail signature. This can potentially lead to malicious scripts being executed on users' browsers, compromising their session data or performing unauthorized actions.
Recommendations For OX App Suite versions 7.10.5 and earlier, update to a version later than 7.10.5 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾