CVE-2016-6854

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5

published December 15, 2016

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02441 · 84.1th percentile
Published
2016-12-15T06:31Z
EPSS history
Timeline
  • 15 DEC 06:31Z
    An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5
    cvelistv5