CVE-2022-29852

published 2022-12-26

CVE-2022-29852: OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.

Priority P4 23 medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

OX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
open-xchange	open-xchange_appsuite	< 7.10.5	7.10.5
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	—	—
open-xchange	open-xchange_appsuite	>= 8.2 < 8.2.324	8.2.324

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79