| Package | Affected versions | Patched versions |
|---|---|---|
| ox guard | ≤ 2.4.2 |
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwanted actions via the web interface (sending mail, deleting data etc.).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free