CVE-2021-23929

OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI

published January 12, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01146 · 66.5th percentile
Published
2021-01-12T21:26Z
EPSS history
Timeline
  • 12 JAN 21:26Z
    OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI
    cvelistv5