Security Advisory

CVE-2016-6845

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-12-15 06:31:00

Last updated 2024-08-06 01:43:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a proper location. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).

← Browse all CVEs View on cve.org ↗