Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2023-29044
Vulnerability from cvelistv5
Published
2023-11-02 13:01
Modified
2024-08-02 14:00
Severity ?
EPSS score ?
Summary
Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| OX Software GmbH | OX App Suite |
Version: 0 ≤ 7.10.6-rev7 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T14:00:14.693Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "release-notes", "x_transferred", ], url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { tags: [ "vendor-advisory", "x_transferred", ], url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { defaultStatus: "unaffected", modules: [ "office", ], product: "OX App Suite", vendor: "OX Software GmbH", versions: [ { lessThanOrEqual: "7.10.6-rev7", status: "affected", version: "0", versionType: "semver", }, ], }, ], descriptions: [ { lang: "en", supportingMedia: [ { base64: false, type: "text/html", value: "<p>Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.</p>", }, ], value: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-79", description: "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-01-12T07:08:04.419Z", orgId: "8ce71d90-2354-404b-a86e-bec2cc4e6981", shortName: "OX", }, references: [ { tags: [ "release-notes", ], url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { tags: [ "vendor-advisory", ], url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, ], source: { defect: [ "DOCS-4927", ], discovery: "INTERNAL", }, x_generator: { engine: "Vulnogram 0.1.0-dev", }, }, }, cveMetadata: { assignerOrgId: "8ce71d90-2354-404b-a86e-bec2cc4e6981", assignerShortName: "OX", cveId: "CVE-2023-29044", datePublished: "2023-11-02T13:01:31.388Z", dateReserved: "2023-03-30T09:34:25.188Z", dateUpdated: "2024-08-02T14:00:14.693Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2023-29044\",\"sourceIdentifier\":\"security@open-xchange.com\",\"published\":\"2023-11-02T14:15:11.087\",\"lastModified\":\"2024-11-21T07:56:26.287\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\\n\\n\"},{\"lang\":\"es\",\"value\":\"Las operaciones de documentos podrían manipularse para contener tipos de datos no válidos, posiblemente código de script. Se podría inyectar código de script en una operación que se ejecutaría para los usuarios que colaboran activamente en el mismo documento. Los datos de operación intercambiados entre partes colaboradoras ahora se escapan para evitar la ejecución del código. No se conocen exploits disponibles públicamente.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@open-xchange.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}]},\"weaknesses\":[{\"source\":\"security@open-xchange.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"7.10.6\",\"matchCriteriaId\":\"59D4F30E-2F52-4948-9C69-C57472833C79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A144D75D-60A8-4EE0-813C-F658C626B2AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6069:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DA66230-DE02-4881-A893-E9E78286B157\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6073:*:*:*:*:*:*\",\"matchCriteriaId\":\"955F3DFB-6479-4867-B62A-82730DBEB498\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6080:*:*:*:*:*:*\",\"matchCriteriaId\":\"327D1B56-0D05-4D99-91D4-CC1F0AC32972\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6085:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0CD0684-C431-47F8-A2F4-1936D5C5A72B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6093:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAA6A4A7-C1EE-4716-9F4D-2FF4C4D5FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6102:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0968764-CCEE-47A7-9111-E106D887DA43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6112:*:*:*:*:*:*\",\"matchCriteriaId\":\"16589FBB-F0CD-4041-8141-5C89FCCA72AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6121:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CB877EE-A5FE-4FF7-9D21-5C1CFA7343D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6133:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DF5FB90-8D6D-4F99-B454-411B1DFFA630\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6138:*:*:*:*:*:*\",\"matchCriteriaId\":\"F58876B9-6C2E-4048-A793-B441A84E86F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6141:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5F177CB-CC45-45A0-9D02-C14A13ECC7A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6146:*:*:*:*:*:*\",\"matchCriteriaId\":\"A89A4192-54E9-4899-8C7B-6C7F7E650D5C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6147:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2DC1357-9CD5-415F-A190-2F3F4498EF96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6148:*:*:*:*:*:*\",\"matchCriteriaId\":\"D78ACF64-2802-44DD-AF7A-1BD5EA7F9908\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6150:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8F675FA-1684-413A-B1BE-1C5434AC2862\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6156:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3F1FDC3-35B2-4BDB-A685-75BC72588179\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6161:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B1E509D-2F41-4296-86D2-6BD71783060F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6166:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC93EA37-F341-45EC-B651-4F326FB8C613\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6173:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A4DB8A6-1702-462C-BFCB-39F91D2EFCE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6176:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC0AEFDB-D033-47FC-93FC-8652F922BB8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6178:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5354768-6527-43C2-B492-A8C14AB4E784\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6189:*:*:*:*:*:*\",\"matchCriteriaId\":\"D83F26D1-B8C6-4114-81EC-810DD5412DC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6194:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9EBC010-9963-4636-96F7-A121FCF755A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6199:*:*:*:*:*:*\",\"matchCriteriaId\":\"F626D64B-C301-4CD8-94B4-48689BD3F29C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6204:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E32810C-7B35-42F1-BCA5-E10C02BE2215\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6205:*:*:*:*:*:*\",\"matchCriteriaId\":\"6539D059-8614-4C26-93C4-C2DDCC5D35E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6209:*:*:*:*:*:*\",\"matchCriteriaId\":\"E359EE75-A2F9-479B-B757-CAE1064AB8F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6210:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BCABDEF-D292-406E-B53C-AFF22484E916\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6214:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABE8872C-B1DD-4A45-8EF8-E8C355CA6C54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6215:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B20B83-833A-4C68-8693-365BD046C157\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6216:*:*:*:*:*:*\",\"matchCriteriaId\":\"E254E6D1-D18E-4A2A-A2FF-7D03F39E65DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6218:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F0C5E53-4D15-425A-B4CF-5869353724BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6219:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F4BF5F1-F316-4BAC-83E0-DEAC8C50754E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6220:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CDD03A8-5B86-4B87-9C29-6C967261C5C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6227:*:*:*:*:*:*\",\"matchCriteriaId\":\"6071E15F-4D59-41DC-A4D4-7D1AA392A1F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6230:*:*:*:*:*:*\",\"matchCriteriaId\":\"C72C1CEB-7BF7-4A5F-B2E9-397F86CCBF4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6233:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B0F0218-4224-4084-B38D-9719D3782C03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6235:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFC41329-1AD6-4575-A22D-977EC5539DA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6236:*:*:*:*:*:*\",\"matchCriteriaId\":\"217A06B7-0823-4508-BC0C-AD792BA88F7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6239:*:*:*:*:*:*\",\"matchCriteriaId\":\"246E98B2-A6C8-4410-AA6A-7E81EE8C5E76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6241:*:*:*:*:*:*\",\"matchCriteriaId\":\"74D1EC02-D009-45DA-B1EC-2219E0F0183C\"}]}]}],\"references\":[{\"url\":\"https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json\",\"source\":\"security@open-xchange.com\"},{\"url\":\"https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf\",\"source\":\"security@open-xchange.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]}}", }, }
oxas-adv-2023-0004
Vulnerability from csaf_ox
Published
2023-08-01 00:00
Modified
2024-01-22 00:00
Summary
OX App Suite Security Advisory OXAS-ADV-2023-0004
{ document: { aggregate_severity: { text: "CRITICAL", }, category: "csaf_security_advisory", csaf_version: "2.0", lang: "en-US", publisher: { category: "vendor", name: "Open-Xchange GmbH", namespace: "https://open-xchange.com/", }, references: [ { category: "external", summary: "Release Notes", url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { category: "self", summary: "Canonical CSAF document", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { category: "self", summary: "Markdown representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/md/2023/oxas-adv-2023-0004.md", }, { category: "self", summary: "HTML representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/html/2023/oxas-adv-2023-0004.html", }, { category: "self", summary: "Plain-text representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/txt/2023/oxas-adv-2023-0004.txt", }, ], title: "OX App Suite Security Advisory OXAS-ADV-2023-0004", tracking: { current_release_date: "2024-01-22T00:00:00+00:00", generator: { date: "2024-01-22T13:14:29+00:00", engine: { name: "OX CSAF", version: "1.0.0", }, }, id: "OXAS-ADV-2023-0004", initial_release_date: "2023-08-01T00:00:00+02:00", revision_history: [ { date: "2023-08-01T00:00:00+02:00", number: "1", summary: "Initial release", }, { date: "2024-01-22T00:00:00+00:00", number: "2", summary: "Public release", }, { date: "2024-01-22T00:00:00+00:00", number: "3", summary: "Public release", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "7.10.6-rev48", product: { name: "OX App Suite backend 7.10.6-rev48", product_id: "OXAS-BACKEND_7.10.6-rev48", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:7.10.6:rev48:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.11", product: { name: "OX App Suite backend 8.11", product_id: "OXAS-BACKEND_8.11", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.11:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev49", product: { name: "OX App Suite backend 7.10.6-rev49", product_id: "OXAS-BACKEND_7.10.6-rev49", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:7.10.6:rev49:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, { category: "product_version", name: "8.12", product: { name: "OX App Suite backend 8.12", product_id: "OXAS-BACKEND_8.12", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.12:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.13", product: { name: "OX App Suite backend 8.13", product_id: "OXAS-BACKEND_8.13", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.13:*:*:*:*:*:*:*", }, }, }, ], category: "product_name", name: "OX App Suite backend", }, { branches: [ { category: "product_version", name: "2.10.7-rev6", product: { name: "OX App Suite guard 2.10.7-rev6", product_id: "OXAS-GUARD_2.10.7-rev6", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:guard:2.10.7:rev6:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "2.10.7-rev7", product: { name: "OX App Suite guard 2.10.7-rev7", product_id: "OXAS-GUARD_2.10.7-rev7", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:guard:2.10.7:rev7:*:*:*:*:*:*", }, }, }, ], category: "product_name", name: "OX App Suite guard", }, { branches: [ { category: "product_version", name: "7.10.6-rev5", product: { name: "OX App Suite office 7.10.6-rev5", product_id: "OXAS-OFFICE_7.10.6-rev5", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev5:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.12", product: { name: "OX App Suite office 8.12", product_id: "OXAS-OFFICE_8.12", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:8.12:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev6", product: { name: "OX App Suite office 7.10.6-rev6", product_id: "OXAS-OFFICE_7.10.6-rev6", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev6:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, { category: "product_version", name: "8.13", product: { name: "OX App Suite office 8.13", product_id: "OXAS-OFFICE_8.13", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:8.13:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev7", product: { name: "OX App Suite office 7.10.6-rev7", product_id: "OXAS-OFFICE_7.10.6-rev7", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev7:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev8", product: { name: "OX App Suite office 7.10.6-rev8", product_id: "OXAS-OFFICE_7.10.6-rev8", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev8:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, ], category: "product_name", name: "OX App Suite office", }, ], category: "vendor", name: "Open-Xchange GmbH", }, ], }, vulnerabilities: [ { cve: "CVE-2023-29046", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2023-01-03T14:25:29+01:00", ids: [ { system_name: "OX Bug", text: "MWB-1982", }, ], notes: [ { category: "description", text: "Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connections were logged.", }, ], product_status: { first_fixed: [ "OXAS-BACKEND_7.10.6-rev49", "OXAS-BACKEND_8.12", ], last_affected: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-24T13:31:41+02:00", details: "Please deploy the provided updates and patch releases. A new mechanism has been introduced to cancel external connections that might access user-controlled endpoints.", product_ids: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, ], threats: [ { category: "impact", details: "Some connections use user-controlled endpoints, which could be malicious and attempt to keep the connection open for an extended period of time. As a result users were able to trigger large amount of egress network connections, possibly exhausting network pool resources and lock up legitimate requests.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "Timeouts for external content do not cancel the connection", }, { acknowledgments: [ { names: [ "Tim Coen", ], }, ], cve: "CVE-2023-26455", cwe: { id: "CWE-287", name: "Improper Authentication", }, discovery_date: "2023-01-09T17:03:02+01:00", ids: [ { system_name: "OX Bug", text: "MWB-1996", }, ], notes: [ { category: "description", text: "RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer.", }, ], product_status: { first_fixed: [ "OXAS-BACKEND_7.10.6-rev49", "OXAS-BACKEND_8.13", ], last_affected: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-25T11:30:00+02:00", details: "Please deploy the provided updates and patch releases. The interface has been updated to require authenticated requests.", product_ids: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 5.6, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L", version: "3.1", }, products: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, ], threats: [ { category: "impact", details: "Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "RMI allows event organizer changes without authentication", }, { cve: "CVE-2023-26456", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:15:46+02:00", ids: [ { system_name: "OX Bug", text: "GUARD-440", }, ], notes: [ { category: "description", text: "Users were able to set an arbitrary \"product name\" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks.", }, ], product_status: { first_fixed: [ "OXAS-GUARD_2.10.7-rev7", ], last_affected: [ "OXAS-GUARD_2.10.7-rev6", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-06T11:44:45+02:00", details: "Please deploy the provided updates and patch releases. Sanitization is in place for product names now.", product_ids: [ "OXAS-GUARD_2.10.7-rev6", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-GUARD_2.10.7-rev6", ], }, ], threats: [ { category: "impact", details: "Accounts that were temporarily taken over could be configured to trigger persistent code execution, allowing an attacker to build a foothold.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped OX Guard \"productName\" property", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-29047", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-14T09:38:49+01:00", ids: [ { system_name: "OX Bug", text: "DOCS-4767", }, ], notes: [ { category: "description", text: "Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T16:55:31+02:00", details: "Please deploy the provided updates and patch releases. All possible IC WebService API request parameters are now validated before further processing. In case invalid parameters are detected, the incident gets logged on level ERROR and BAD_REQUEST (Http code 400) response is returned to caller.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "An attacker with access to the adjacent network and potentially API credentials, could read and modify database content which is accessible to the imageconverter SQL user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQL Injection at Imageconverter \"getMetadata\"", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26452", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:38+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4800", }, ], notes: [ { category: "description", text: "Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:40:48+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter cacheAndGetImageAndMetadata endpoint", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26453", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:40+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4801", }, ], notes: [ { category: "description", text: "Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:46:17+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter cacheImage endpoint", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26454", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:43+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4802", }, ], notes: [ { category: "description", text: "Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:49:31+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter getMetadata endpoint", }, { cve: "CVE-2023-29045", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:22:30+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4926", }, ], notes: [ { category: "description", text: "Documents operations, in this case \"drawing\", could be manipulated to contain invalid data types, possibly script code.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-07T12:49:28+02:00", details: "Please deploy the provided updates and patch releases. Operation data exchanged between collaborating parties does now gets checked for validity to avoid code execution.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"insertDrawing\" content in collaboration mode", }, { cve: "CVE-2023-29044", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:24:13+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4927", }, ], notes: [ { category: "description", text: "Documents operations could be manipulated to contain invalid data types, possibly script code.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-07T12:50:11+02:00", details: "Please deploy the provided updates and patch releases. Operation data exchanged between collaborating parties does now get escaped to avoid code execution.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"imageData\" content in collaboration mode", }, { cve: "CVE-2023-29043", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:26:04+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4928", }, ], notes: [ { category: "description", text: "Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-06-23T16:16:10+02:00", details: "Please deploy the provided updates and patch releases. The relevant attribute does now get encoded to avoid the possibility of executing script code.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.1, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain actions, like copying content.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"imageSrc\" content at presentations", }, ], }
OXAS-ADV-2023-0004
Vulnerability from csaf_ox
Published
2023-08-01 00:00
Modified
2024-01-22 00:00
Summary
OX App Suite Security Advisory OXAS-ADV-2023-0004
{ document: { aggregate_severity: { text: "CRITICAL", }, category: "csaf_security_advisory", csaf_version: "2.0", lang: "en-US", publisher: { category: "vendor", name: "Open-Xchange GmbH", namespace: "https://open-xchange.com/", }, references: [ { category: "external", summary: "Release Notes", url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { category: "self", summary: "Canonical CSAF document", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { category: "self", summary: "Markdown representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/md/2023/oxas-adv-2023-0004.md", }, { category: "self", summary: "HTML representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/html/2023/oxas-adv-2023-0004.html", }, { category: "self", summary: "Plain-text representation", url: "https://documentation.open-xchange.com/appsuite/security/advisories/txt/2023/oxas-adv-2023-0004.txt", }, ], title: "OX App Suite Security Advisory OXAS-ADV-2023-0004", tracking: { current_release_date: "2024-01-22T00:00:00+00:00", generator: { date: "2024-01-22T13:14:29+00:00", engine: { name: "OX CSAF", version: "1.0.0", }, }, id: "OXAS-ADV-2023-0004", initial_release_date: "2023-08-01T00:00:00+02:00", revision_history: [ { date: "2023-08-01T00:00:00+02:00", number: "1", summary: "Initial release", }, { date: "2024-01-22T00:00:00+00:00", number: "2", summary: "Public release", }, { date: "2024-01-22T00:00:00+00:00", number: "3", summary: "Public release", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "7.10.6-rev48", product: { name: "OX App Suite backend 7.10.6-rev48", product_id: "OXAS-BACKEND_7.10.6-rev48", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:7.10.6:rev48:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.11", product: { name: "OX App Suite backend 8.11", product_id: "OXAS-BACKEND_8.11", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.11:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev49", product: { name: "OX App Suite backend 7.10.6-rev49", product_id: "OXAS-BACKEND_7.10.6-rev49", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:7.10.6:rev49:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, { category: "product_version", name: "8.12", product: { name: "OX App Suite backend 8.12", product_id: "OXAS-BACKEND_8.12", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.12:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.13", product: { name: "OX App Suite backend 8.13", product_id: "OXAS-BACKEND_8.13", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:app_suite:8.13:*:*:*:*:*:*:*", }, }, }, ], category: "product_name", name: "OX App Suite backend", }, { branches: [ { category: "product_version", name: "2.10.7-rev6", product: { name: "OX App Suite guard 2.10.7-rev6", product_id: "OXAS-GUARD_2.10.7-rev6", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:guard:2.10.7:rev6:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "2.10.7-rev7", product: { name: "OX App Suite guard 2.10.7-rev7", product_id: "OXAS-GUARD_2.10.7-rev7", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:guard:2.10.7:rev7:*:*:*:*:*:*", }, }, }, ], category: "product_name", name: "OX App Suite guard", }, { branches: [ { category: "product_version", name: "7.10.6-rev5", product: { name: "OX App Suite office 7.10.6-rev5", product_id: "OXAS-OFFICE_7.10.6-rev5", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev5:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "8.12", product: { name: "OX App Suite office 8.12", product_id: "OXAS-OFFICE_8.12", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:8.12:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev6", product: { name: "OX App Suite office 7.10.6-rev6", product_id: "OXAS-OFFICE_7.10.6-rev6", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev6:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, { category: "product_version", name: "8.13", product: { name: "OX App Suite office 8.13", product_id: "OXAS-OFFICE_8.13", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:8.13:*:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev7", product: { name: "OX App Suite office 7.10.6-rev7", product_id: "OXAS-OFFICE_7.10.6-rev7", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev7:*:*:*:*:*:*", }, }, }, { category: "product_version", name: "7.10.6-rev8", product: { name: "OX App Suite office 7.10.6-rev8", product_id: "OXAS-OFFICE_7.10.6-rev8", product_identification_helper: { cpe: "cpe:2.3:a:open-xchange:office:7.10.6:rev8:*:*:*:*:*:*", x_generic_uris: [ { namespace: "https://documentation.open-xchange.com/appsuite/security/advisories/#urn-parsing", uri: "urn:open-xchange:app_suite:patch-id:6243", }, ], }, }, }, ], category: "product_name", name: "OX App Suite office", }, ], category: "vendor", name: "Open-Xchange GmbH", }, ], }, vulnerabilities: [ { cve: "CVE-2023-29046", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2023-01-03T14:25:29+01:00", ids: [ { system_name: "OX Bug", text: "MWB-1982", }, ], notes: [ { category: "description", text: "Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connections were logged.", }, ], product_status: { first_fixed: [ "OXAS-BACKEND_7.10.6-rev49", "OXAS-BACKEND_8.12", ], last_affected: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-24T13:31:41+02:00", details: "Please deploy the provided updates and patch releases. A new mechanism has been introduced to cancel external connections that might access user-controlled endpoints.", product_ids: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.11", ], }, ], threats: [ { category: "impact", details: "Some connections use user-controlled endpoints, which could be malicious and attempt to keep the connection open for an extended period of time. As a result users were able to trigger large amount of egress network connections, possibly exhausting network pool resources and lock up legitimate requests.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "Timeouts for external content do not cancel the connection", }, { acknowledgments: [ { names: [ "Tim Coen", ], }, ], cve: "CVE-2023-26455", cwe: { id: "CWE-287", name: "Improper Authentication", }, discovery_date: "2023-01-09T17:03:02+01:00", ids: [ { system_name: "OX Bug", text: "MWB-1996", }, ], notes: [ { category: "description", text: "RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer.", }, ], product_status: { first_fixed: [ "OXAS-BACKEND_7.10.6-rev49", "OXAS-BACKEND_8.13", ], last_affected: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-25T11:30:00+02:00", details: "Please deploy the provided updates and patch releases. The interface has been updated to require authenticated requests.", product_ids: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 5.6, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L", version: "3.1", }, products: [ "OXAS-BACKEND_7.10.6-rev48", "OXAS-BACKEND_8.12", ], }, ], threats: [ { category: "impact", details: "Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "RMI allows event organizer changes without authentication", }, { cve: "CVE-2023-26456", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:15:46+02:00", ids: [ { system_name: "OX Bug", text: "GUARD-440", }, ], notes: [ { category: "description", text: "Users were able to set an arbitrary \"product name\" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks.", }, ], product_status: { first_fixed: [ "OXAS-GUARD_2.10.7-rev7", ], last_affected: [ "OXAS-GUARD_2.10.7-rev6", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-06T11:44:45+02:00", details: "Please deploy the provided updates and patch releases. Sanitization is in place for product names now.", product_ids: [ "OXAS-GUARD_2.10.7-rev6", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-GUARD_2.10.7-rev6", ], }, ], threats: [ { category: "impact", details: "Accounts that were temporarily taken over could be configured to trigger persistent code execution, allowing an attacker to build a foothold.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped OX Guard \"productName\" property", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-29047", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-14T09:38:49+01:00", ids: [ { system_name: "OX Bug", text: "DOCS-4767", }, ], notes: [ { category: "description", text: "Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T16:55:31+02:00", details: "Please deploy the provided updates and patch releases. All possible IC WebService API request parameters are now validated before further processing. In case invalid parameters are detected, the incident gets logged on level ERROR and BAD_REQUEST (Http code 400) response is returned to caller.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "NONE", baseScore: 7.4, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "An attacker with access to the adjacent network and potentially API credentials, could read and modify database content which is accessible to the imageconverter SQL user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQL Injection at Imageconverter \"getMetadata\"", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26452", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:38+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4800", }, ], notes: [ { category: "description", text: "Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:40:48+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter cacheAndGetImageAndMetadata endpoint", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26453", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:40+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4801", }, ], notes: [ { category: "description", text: "Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:46:17+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter cacheImage endpoint", }, { acknowledgments: [ { names: [ "Mehmet 'mdisec' Ince", ], }, ], cve: "CVE-2023-26454", cwe: { id: "CWE-89", name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", }, discovery_date: "2023-03-29T17:23:43+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4802", }, ], notes: [ { category: "description", text: "Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev6", "OXAS-OFFICE_8.13", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, remediations: [ { category: "vendor_fix", date: "2023-04-27T15:49:31+02:00", details: "Please deploy the provided updates and patch releases. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error.", product_ids: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "ADJACENT_NETWORK", availabilityImpact: "HIGH", baseScore: 9.6, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev5", "OXAS-OFFICE_8.12", ], }, ], threats: [ { category: "impact", details: "Arbitrary SQL statements could be executed in the context of the services database user account.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "SQLi at Imageconverter getMetadata endpoint", }, { cve: "CVE-2023-29045", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:22:30+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4926", }, ], notes: [ { category: "description", text: "Documents operations, in this case \"drawing\", could be manipulated to contain invalid data types, possibly script code.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-07T12:49:28+02:00", details: "Please deploy the provided updates and patch releases. Operation data exchanged between collaborating parties does now gets checked for validity to avoid code execution.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"insertDrawing\" content in collaboration mode", }, { cve: "CVE-2023-29044", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:24:13+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4927", }, ], notes: [ { category: "description", text: "Documents operations could be manipulated to contain invalid data types, possibly script code.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-07-07T12:50:11+02:00", details: "Please deploy the provided updates and patch releases. Operation data exchanged between collaborating parties does now get escaped to avoid code execution.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"imageData\" content in collaboration mode", }, { cve: "CVE-2023-29043", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, discovery_date: "2023-06-22T10:26:04+02:00", ids: [ { system_name: "OX Bug", text: "DOCS-4928", }, ], notes: [ { category: "description", text: "Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document.", }, ], product_status: { first_fixed: [ "OXAS-OFFICE_7.10.6-rev8", ], last_affected: [ "OXAS-OFFICE_7.10.6-rev7", ], }, remediations: [ { category: "vendor_fix", date: "2023-06-23T16:16:10+02:00", details: "Please deploy the provided updates and patch releases. The relevant attribute does now get encoded to avoid the possibility of executing script code.", product_ids: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.1, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, products: [ "OXAS-OFFICE_7.10.6-rev7", ], }, ], threats: [ { category: "impact", details: "Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain actions, like copying content.", }, { category: "exploit_status", details: "No publicly available exploits are known.", }, ], title: "XSS through unescaped \"imageSrc\" content at presentations", }, ], }
fkie_cve-2023-29044
Vulnerability from fkie_nvd
Published
2023-11-02 14:15
Modified
2024-11-21 07:56
Severity ?
5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Summary
Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*", matchCriteriaId: "59D4F30E-2F52-4948-9C69-C57472833C79", versionEndExcluding: "7.10.6", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:-:*:*:*:*:*:*", matchCriteriaId: "A144D75D-60A8-4EE0-813C-F658C626B2AA", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6069:*:*:*:*:*:*", matchCriteriaId: "2DA66230-DE02-4881-A893-E9E78286B157", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6073:*:*:*:*:*:*", matchCriteriaId: "955F3DFB-6479-4867-B62A-82730DBEB498", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6080:*:*:*:*:*:*", matchCriteriaId: "327D1B56-0D05-4D99-91D4-CC1F0AC32972", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6085:*:*:*:*:*:*", matchCriteriaId: "D0CD0684-C431-47F8-A2F4-1936D5C5A72B", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6093:*:*:*:*:*:*", matchCriteriaId: "EAA6A4A7-C1EE-4716-9F4D-2FF4C4D5FEC8", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6102:*:*:*:*:*:*", matchCriteriaId: "D0968764-CCEE-47A7-9111-E106D887DA43", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6112:*:*:*:*:*:*", matchCriteriaId: "16589FBB-F0CD-4041-8141-5C89FCCA72AF", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6121:*:*:*:*:*:*", matchCriteriaId: "3CB877EE-A5FE-4FF7-9D21-5C1CFA7343D4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6133:*:*:*:*:*:*", matchCriteriaId: "0DF5FB90-8D6D-4F99-B454-411B1DFFA630", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6138:*:*:*:*:*:*", matchCriteriaId: "F58876B9-6C2E-4048-A793-B441A84E86F5", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6141:*:*:*:*:*:*", matchCriteriaId: "D5F177CB-CC45-45A0-9D02-C14A13ECC7A3", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6146:*:*:*:*:*:*", matchCriteriaId: "A89A4192-54E9-4899-8C7B-6C7F7E650D5C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6147:*:*:*:*:*:*", matchCriteriaId: "F2DC1357-9CD5-415F-A190-2F3F4498EF96", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6148:*:*:*:*:*:*", matchCriteriaId: "D78ACF64-2802-44DD-AF7A-1BD5EA7F9908", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6150:*:*:*:*:*:*", matchCriteriaId: "E8F675FA-1684-413A-B1BE-1C5434AC2862", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6156:*:*:*:*:*:*", matchCriteriaId: "F3F1FDC3-35B2-4BDB-A685-75BC72588179", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6161:*:*:*:*:*:*", matchCriteriaId: "5B1E509D-2F41-4296-86D2-6BD71783060F", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6166:*:*:*:*:*:*", matchCriteriaId: "AC93EA37-F341-45EC-B651-4F326FB8C613", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6173:*:*:*:*:*:*", matchCriteriaId: "1A4DB8A6-1702-462C-BFCB-39F91D2EFCE1", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6176:*:*:*:*:*:*", matchCriteriaId: "FC0AEFDB-D033-47FC-93FC-8652F922BB8C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6178:*:*:*:*:*:*", matchCriteriaId: "B5354768-6527-43C2-B492-A8C14AB4E784", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6189:*:*:*:*:*:*", matchCriteriaId: "D83F26D1-B8C6-4114-81EC-810DD5412DC8", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6194:*:*:*:*:*:*", matchCriteriaId: "E9EBC010-9963-4636-96F7-A121FCF755A7", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6199:*:*:*:*:*:*", matchCriteriaId: "F626D64B-C301-4CD8-94B4-48689BD3F29C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6204:*:*:*:*:*:*", matchCriteriaId: "5E32810C-7B35-42F1-BCA5-E10C02BE2215", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6205:*:*:*:*:*:*", matchCriteriaId: "6539D059-8614-4C26-93C4-C2DDCC5D35E2", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6209:*:*:*:*:*:*", matchCriteriaId: "E359EE75-A2F9-479B-B757-CAE1064AB8F4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6210:*:*:*:*:*:*", matchCriteriaId: "0BCABDEF-D292-406E-B53C-AFF22484E916", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6214:*:*:*:*:*:*", matchCriteriaId: "ABE8872C-B1DD-4A45-8EF8-E8C355CA6C54", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6215:*:*:*:*:*:*", matchCriteriaId: "44B20B83-833A-4C68-8693-365BD046C157", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6216:*:*:*:*:*:*", matchCriteriaId: "E254E6D1-D18E-4A2A-A2FF-7D03F39E65DD", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6218:*:*:*:*:*:*", matchCriteriaId: "5F0C5E53-4D15-425A-B4CF-5869353724BF", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6219:*:*:*:*:*:*", matchCriteriaId: "2F4BF5F1-F316-4BAC-83E0-DEAC8C50754E", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6220:*:*:*:*:*:*", matchCriteriaId: "5CDD03A8-5B86-4B87-9C29-6C967261C5C0", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6227:*:*:*:*:*:*", matchCriteriaId: "6071E15F-4D59-41DC-A4D4-7D1AA392A1F2", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6230:*:*:*:*:*:*", matchCriteriaId: "C72C1CEB-7BF7-4A5F-B2E9-397F86CCBF4E", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6233:*:*:*:*:*:*", matchCriteriaId: "5B0F0218-4224-4084-B38D-9719D3782C03", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6235:*:*:*:*:*:*", matchCriteriaId: "BFC41329-1AD6-4575-A22D-977EC5539DA4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6236:*:*:*:*:*:*", matchCriteriaId: "217A06B7-0823-4508-BC0C-AD792BA88F7B", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6239:*:*:*:*:*:*", matchCriteriaId: "246E98B2-A6C8-4410-AA6A-7E81EE8C5E76", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6241:*:*:*:*:*:*", matchCriteriaId: "74D1EC02-D009-45DA-B1EC-2219E0F0183C", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", }, { lang: "es", value: "Las operaciones de documentos podrían manipularse para contener tipos de datos no válidos, posiblemente código de script. Se podría inyectar código de script en una operación que se ejecutaría para los usuarios que colaboran activamente en el mismo documento. Los datos de operación intercambiados entre partes colaboradoras ahora se escapan para evitar la ejecución del código. No se conocen exploits disponibles públicamente.", }, ], id: "CVE-2023-29044", lastModified: "2024-11-21T07:56:26.287", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "security@open-xchange.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2023-11-02T14:15:11.087", references: [ { source: "security@open-xchange.com", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { source: "security@open-xchange.com", tags: [ "Release Notes", "Vendor Advisory", ], url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Release Notes", "Vendor Advisory", ], url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, ], sourceIdentifier: "security@open-xchange.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "security@open-xchange.com", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2023-29044
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-29044", id: "GSD-2023-29044", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-29044", ], details: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", id: "GSD-2023-29044", modified: "2023-12-13T01:20:57.029963Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@open-xchange.com", ID: "CVE-2023-29044", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "OX App Suite", version: { version_data: [ { version_affected: "<=", version_name: "0", version_value: "7.10.6-rev7", }, ], }, }, ], }, vendor_name: "OX Software GmbH", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", }, ], }, generator: { engine: "Vulnogram 0.1.0-dev", }, impact: { cvss: [ { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, ], }, problemtype: { problemtype_data: [ { description: [ { cweId: "CWE-79", lang: "eng", value: "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, ], }, ], }, references: { reference_data: [ { name: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", refsource: "MISC", url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, { name: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", refsource: "MISC", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, ], }, source: { defect: [ "DOCS-4927", ], discovery: "INTERNAL", }, }, "nvd.nist.gov": { cve: { configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*", matchCriteriaId: "59D4F30E-2F52-4948-9C69-C57472833C79", versionEndExcluding: "7.10.6", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:-:*:*:*:*:*:*", matchCriteriaId: "A144D75D-60A8-4EE0-813C-F658C626B2AA", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6069:*:*:*:*:*:*", matchCriteriaId: "2DA66230-DE02-4881-A893-E9E78286B157", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6073:*:*:*:*:*:*", matchCriteriaId: "955F3DFB-6479-4867-B62A-82730DBEB498", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6080:*:*:*:*:*:*", matchCriteriaId: "327D1B56-0D05-4D99-91D4-CC1F0AC32972", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6085:*:*:*:*:*:*", matchCriteriaId: "D0CD0684-C431-47F8-A2F4-1936D5C5A72B", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6093:*:*:*:*:*:*", matchCriteriaId: "EAA6A4A7-C1EE-4716-9F4D-2FF4C4D5FEC8", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6102:*:*:*:*:*:*", matchCriteriaId: "D0968764-CCEE-47A7-9111-E106D887DA43", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6112:*:*:*:*:*:*", matchCriteriaId: "16589FBB-F0CD-4041-8141-5C89FCCA72AF", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6121:*:*:*:*:*:*", matchCriteriaId: "3CB877EE-A5FE-4FF7-9D21-5C1CFA7343D4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6133:*:*:*:*:*:*", matchCriteriaId: "0DF5FB90-8D6D-4F99-B454-411B1DFFA630", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6138:*:*:*:*:*:*", matchCriteriaId: "F58876B9-6C2E-4048-A793-B441A84E86F5", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6141:*:*:*:*:*:*", matchCriteriaId: "D5F177CB-CC45-45A0-9D02-C14A13ECC7A3", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6146:*:*:*:*:*:*", matchCriteriaId: "A89A4192-54E9-4899-8C7B-6C7F7E650D5C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6147:*:*:*:*:*:*", matchCriteriaId: "F2DC1357-9CD5-415F-A190-2F3F4498EF96", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6148:*:*:*:*:*:*", matchCriteriaId: "D78ACF64-2802-44DD-AF7A-1BD5EA7F9908", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6150:*:*:*:*:*:*", matchCriteriaId: "E8F675FA-1684-413A-B1BE-1C5434AC2862", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6156:*:*:*:*:*:*", matchCriteriaId: "F3F1FDC3-35B2-4BDB-A685-75BC72588179", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6161:*:*:*:*:*:*", matchCriteriaId: "5B1E509D-2F41-4296-86D2-6BD71783060F", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6166:*:*:*:*:*:*", matchCriteriaId: "AC93EA37-F341-45EC-B651-4F326FB8C613", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6173:*:*:*:*:*:*", matchCriteriaId: "1A4DB8A6-1702-462C-BFCB-39F91D2EFCE1", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6176:*:*:*:*:*:*", matchCriteriaId: "FC0AEFDB-D033-47FC-93FC-8652F922BB8C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6178:*:*:*:*:*:*", matchCriteriaId: "B5354768-6527-43C2-B492-A8C14AB4E784", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6189:*:*:*:*:*:*", matchCriteriaId: "D83F26D1-B8C6-4114-81EC-810DD5412DC8", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6194:*:*:*:*:*:*", matchCriteriaId: "E9EBC010-9963-4636-96F7-A121FCF755A7", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6199:*:*:*:*:*:*", matchCriteriaId: "F626D64B-C301-4CD8-94B4-48689BD3F29C", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6204:*:*:*:*:*:*", matchCriteriaId: "5E32810C-7B35-42F1-BCA5-E10C02BE2215", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6205:*:*:*:*:*:*", matchCriteriaId: "6539D059-8614-4C26-93C4-C2DDCC5D35E2", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6209:*:*:*:*:*:*", matchCriteriaId: "E359EE75-A2F9-479B-B757-CAE1064AB8F4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6210:*:*:*:*:*:*", matchCriteriaId: "0BCABDEF-D292-406E-B53C-AFF22484E916", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6214:*:*:*:*:*:*", matchCriteriaId: "ABE8872C-B1DD-4A45-8EF8-E8C355CA6C54", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6215:*:*:*:*:*:*", matchCriteriaId: "44B20B83-833A-4C68-8693-365BD046C157", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6216:*:*:*:*:*:*", matchCriteriaId: "E254E6D1-D18E-4A2A-A2FF-7D03F39E65DD", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6218:*:*:*:*:*:*", matchCriteriaId: "5F0C5E53-4D15-425A-B4CF-5869353724BF", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6219:*:*:*:*:*:*", matchCriteriaId: "2F4BF5F1-F316-4BAC-83E0-DEAC8C50754E", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6220:*:*:*:*:*:*", matchCriteriaId: "5CDD03A8-5B86-4B87-9C29-6C967261C5C0", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6227:*:*:*:*:*:*", matchCriteriaId: "6071E15F-4D59-41DC-A4D4-7D1AA392A1F2", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6230:*:*:*:*:*:*", matchCriteriaId: "C72C1CEB-7BF7-4A5F-B2E9-397F86CCBF4E", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6233:*:*:*:*:*:*", matchCriteriaId: "5B0F0218-4224-4084-B38D-9719D3782C03", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6235:*:*:*:*:*:*", matchCriteriaId: "BFC41329-1AD6-4575-A22D-977EC5539DA4", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6236:*:*:*:*:*:*", matchCriteriaId: "217A06B7-0823-4508-BC0C-AD792BA88F7B", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6239:*:*:*:*:*:*", matchCriteriaId: "246E98B2-A6C8-4410-AA6A-7E81EE8C5E76", vulnerable: true, }, { criteria: "cpe:2.3:a:open-xchange:open-xchange_appsuite:7.10.6:patch_release_6241:*:*:*:*:*:*", matchCriteriaId: "74D1EC02-D009-45DA-B1EC-2219E0F0183C", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], descriptions: [ { lang: "en", value: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", }, { lang: "es", value: "Las operaciones de documentos podrían manipularse para contener tipos de datos no válidos, posiblemente código de script. Se podría inyectar código de script en una operación que se ejecutaría para los usuarios que colaboran activamente en el mismo documento. Los datos de operación intercambiados entre partes colaboradoras ahora se escapan para evitar la ejecución del código. No se conocen exploits disponibles públicamente.", }, ], id: "CVE-2023-29044", lastModified: "2024-01-12T07:15:09.457", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "nvd@nist.gov", type: "Primary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.4, baseSeverity: "MEDIUM", confidentialityImpact: "LOW", integrityImpact: "LOW", privilegesRequired: "LOW", scope: "CHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", version: "3.1", }, exploitabilityScore: 2.3, impactScore: 2.7, source: "security@open-xchange.com", type: "Secondary", }, ], }, published: "2023-11-02T14:15:11.087", references: [ { source: "security@open-xchange.com", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { source: "security@open-xchange.com", tags: [ "Release Notes", "Vendor Advisory", ], url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, ], sourceIdentifier: "security@open-xchange.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-79", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-79", }, ], source: "security@open-xchange.com", type: "Secondary", }, ], }, }, }, }
ghsa-w4gp-rmfp-f2gh
Vulnerability from github
Published
2023-11-02 15:30
Modified
2023-11-02 15:30
Severity ?
Details
Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.
{ affected: [], aliases: [ "CVE-2023-29044", ], database_specific: { cwe_ids: [ "CWE-79", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2023-11-02T14:15:11Z", severity: "MODERATE", }, details: "Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.\n\n", id: "GHSA-w4gp-rmfp-f2gh", modified: "2023-11-02T15:30:25Z", published: "2023-11-02T15:30:25Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2023-29044", }, { type: "WEB", url: "https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0004.json", }, { type: "WEB", url: "https://documentation.open-xchange.com/security/advisories/csaf/oxas-adv-2023-0004.json", }, { type: "WEB", url: "https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6243_7.10.6_2023-08-01.pdf", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", type: "CVSS_V3", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.