CVE-2021-26698
22.07.2021, 17:15
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used.
| Vendor | Product | Version |
|---|---|---|
| open-xchange | open-xchange_appsuite | 7.10.3 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5547 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5572 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5623 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5653 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5677 |
| open-xchange | open-xchange_appsuite | 7.10.3:patch_release5720 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev1 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev10 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev11 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev12 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev13 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev14 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev15 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev16 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev17 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev18 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev19 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev2 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev20 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev21 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev22 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev23 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev24 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev25 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev26 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev27 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev28 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev29 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev3 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev30 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev31 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev4 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev5 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev6 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev7 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev8 |
| open-xchange | open-xchange_appsuite | 7.10.3:rev9 |
| open-xchange | open-xchange_appsuite | 7.10.4 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev1 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev10 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev11 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev12 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev13 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev14 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev15 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev16 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev17 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev2 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev3 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev4 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev5 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev6 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev7 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev8 |
| open-xchange | open-xchange_appsuite | 7.10.4:rev9 |
𝑥
= Vulnerable software versions
References