Description
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified oAuth API functions.
References
- openxchange-cve20137142-xss(90545) vdb-entry
- 102193 vdb-entry
- 1029650 vdb-entry
- 65012 vdb-entry
- 20140117 Open-Xchange Security Advisory 2014-01-17 mailing-list