CVE-2023-41710
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when adding it to DOM. Attackers could lure victims to user accounts with malicious script code and make them execute it in the context of a trusted domain. We added sanitization for this content. No publicly available exploits are known.
Se podría almacenar un código de secuencia de comandos definido por el usuario para una URL de la tienda relacionada con ventas adicionales. Este código no se sanitizó correctamente al agregarlo al DOM. Los atacantes podrían atraer a las víctimas a cuentas de usuario con código de script malicioso y obligarlas a ejecutarlo en el contexto de un dominio confiable. Agregamos sanitización para este contenido. No se conocen exploits disponibles públicamente.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-08-30 CVE Reserved
- 2024-01-08 CVE Published
- 2024-01-24 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6251_7.10.6_2023-09-25.pdf | Release Notes |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | < 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version " < 7.10.6" | - |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | - |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev01 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev02 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev03 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev04 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev05 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev06 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev07 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev08 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev09 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev10 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev11 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev12 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev13 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev14 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev15 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev16 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev17 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev18 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev19 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev20 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev21 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev22 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev23 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev24 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev25 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev26 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev27 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev28 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev29 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev30 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev31 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev32 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev33 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev34 |
Affected
| ||||||