CVE-2021-38377

MEDIUM 6.1CVE-2021-38377 · Published 22/11/2021 · updated 17/06/2026

In short

CVE-2021-38377 is a MEDIUM (CVSS 6.1) vulnerability affecting ox app suite (open-xchange).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ox app suite open-xchange	`≤ 7.10.5`	No fix yet

Description

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results.

References

packetstormsecurity.com/files/165038/OX-App-Suite-7.10.5-Cross-Site-Scripting-Information-Disclosure.html · Exploit
seclists.org/fulldisclosure/2021/Nov/43 · Exploit
open-xchange.com · Product

More vulnerabilities in ox app suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ox app suite

open-xchange

≤ 7.10.5

No fix yet

More vulnerabilities in ox app suite

See all →