Show filters
182 Total Results
Displaying 51-60 of 182
Sort by:
Attacker Value
Unknown
CVE-2021-37403
Disclosure Date: July 22, 2021 (last updated February 23, 2025)
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and an App Loader relative URL is used.
0
Attacker Value
Unknown
CVE-2021-26699
Disclosure Date: July 22, 2021 (last updated February 23, 2025)
OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.
0
Attacker Value
Unknown
CVE-2021-26698
Disclosure Date: July 22, 2021 (last updated February 23, 2025)
OX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet (user-generated content) when a sharing link is created and the dl parameter is used.
0
Attacker Value
Unknown
CVE-2020-28945
Disclosure Date: May 03, 2021 (last updated February 22, 2025)
OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as 
OX App Suite 7.10.4 and earlier allows SSRF via a snippet.
0
Attacker Value
Unknown
CVE-2021-31934
Disclosure Date: April 30, 2021 (last updated February 22, 2025)
OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone.
0
Attacker Value
Unknown
CVE-2021-31935
Disclosure Date: April 30, 2021 (last updated February 22, 2025)
OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.
0
Attacker Value
Unknown
CVE-2021-23932
Disclosure Date: January 12, 2021 (last updated February 22, 2025)
OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.
0
Attacker Value
Unknown
CVE-2021-23931
Disclosure Date: January 12, 2021 (last updated February 22, 2025)
OX App Suite through 7.10.4 allows XSS via an inline binary file.
0
Attacker Value
Unknown
CVE-2021-23928
Disclosure Date: January 12, 2021 (last updated February 22, 2025)
OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.
0
