| Package | Affected versions | Patched versions |
|---|---|---|
| open-xchange appsuite | ≤ 7.10.3 |
OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free