← Voltar para CVEs

CVE-2013-7485

MEDIUM

6.1

Descricao

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or HTML via the publication name, which is not properly handled in an error message. NOTE: this vulnerability was SPLIT from CVE-2013-6242 because it affects different sets of versions.

Detalhes CVE

Pontuacao CVSS v3.16.1

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado1/2/2020

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

open-xchange:open-xchange_appsuite

Fraquezas (CWE)

CWE-79

Referencias

http://osvdb.org/100385(cve@mitre.org)

http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22.4-backend-7.4.0-Cross-Site-Scripting.html(cve@mitre.org)

http://seclists.org/bugtraq/2013/Nov/127(cve@mitre.org)

http://secunia.com/advisories/55837(cve@mitre.org)

http://www.securitytracker.com/id/1029394(cve@mitre.org)

http://xforce.iss.net/xforce/xfdb/89250(cve@mitre.org)

http://xforce.iss.net/xforce/xfdb/89251(cve@mitre.org)

https://forum.open-xchange.com/showthread.php?8090-Open-Xchange-releases-Security-Patch-2013-10-30-for-v7-2-2-and-v7-4-0(cve@mitre.org)

http://osvdb.org/100385(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/124185/Open-Xchange-frontend6-6.22.4-backend-7.4.0-Cross-Site-Scripting.html(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/bugtraq/2013/Nov/127(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/55837(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1029394(af854a3a-2127-422b-91ae-364da2661108)

http://xforce.iss.net/xforce/xfdb/89250(af854a3a-2127-422b-91ae-364da2661108)

http://xforce.iss.net/xforce/xfdb/89251(af854a3a-2127-422b-91ae-364da2661108)

https://forum.open-xchange.com/showthread.php?8090-Open-Xchange-releases-Security-Patch-2013-10-30-for-v7-2-2-and-v7-4-0(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.