Email CID References Vulnerability: Malicious Script Code Injection

CVE-2023-41704

What is CVE-2023-41704?

A vulnerability exists in Open-Xchange App Suite that could allow attackers to exploit CID references in emails, enabling the injection of malicious scripts that may bypass the sanitization engine. When users interact with such emails, their sessions could be compromised through these injected scripts. To mitigate this risk, it is essential to apply the latest patches and updates provided by Open-Xchange. Recent improvements in CID handling ensure that resulting content is thoroughly checked for any malicious code attempts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References