Cross-Site Scripting Vulnerability in Open-Xchange App Suite
CVE-2023-29049

5.4MEDIUM

Key Information:

Vendor: Open-xchange Gmbh
Status: Ox App Suite
Vendor: CVE Published:; 8 January 2024

🔔 Create Open-xchange Gmbh Vulnerability Alert

What is CVE-2023-29049?

An input validation vulnerability exists in the upsell widget of the Open-Xchange App Suite portal page, where attackers can exploit this weakness to inject arbitrary script code. If an attacker successfully induces a user to interact with a compromised account or gains temporary access to a legitimate account, they could execute persistent code within a trusted domain. Measures have been implemented to sanitize user input for this widget, effectively preventing execution of malicious content. At this time, there are no known public exploits that actively leverage this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch