CVE-2018-5754
16.06.2018, 01:29
Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote attackers to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to the clipboard.
| Vendor | Product | Version |
|---|---|---|
| open-xchange | open-xchange_appsuite | 𝑥 ≤ 7.8.3 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev10 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev11 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev5 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev6 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev8 |
| open-xchange | open-xchange_appsuite | 7.8.3:rev9 |
| open-xchange | open-xchange_appsuite | 7.8.4 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev3 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev4 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev5 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev6 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev7 |
| open-xchange | open-xchange_appsuite | 7.8.4:rev8 |
𝑥
= Vulnerable software versions
References