CVE-2023-41710

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-41710
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41710.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-41710
Published
2024-01-08T09:04:38.608Z
Modified
2026-07-08T07:34:32.156518445Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when adding it to DOM. Attackers could lure victims to user accounts with malicious script code and make them execute it in the context of a trusted domain. We added sanitization for this content. No publicly available exploits are known.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.10.6-rev34"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41710.json",
    "cna_assigner": "OX",
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

Git / github.com/open-xchange/appsuite-frontend

Affected ranges

Type
GIT
Repo
https://github.com/open-xchange/appsuite-frontend
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
489e7d0bf2bb0dc4c984860c4ce6f4d772086875
Introduced
489e7d0bf2bb0dc4c984860c4ce6f4d772086875
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:open-xchange:ox_app_suite:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:-:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev10:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev11:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev12:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev13:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev14:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev15:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev16:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev17:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev18:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev19:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev20:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev21:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev22:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev23:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev24:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev25:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev26:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev27:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev28:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev29:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev30:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev31:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev32:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev33:*:*:*:*:*:*",
        "cpe:2.3:a:open-xchange:ox_app_suite:7.10.6:rev34:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "7.10.6"
        },
        {
            "introduced": "7.10.6-NA"
        },
        {
            "last_affected": "7.10.6-NA"
        },
        {
            "introduced": "7.10.6-rev10"
        },
        {
            "last_affected": "7.10.6-rev10"
        },
        {
            "introduced": "7.10.6-rev11"
        },
        {
            "last_affected": "7.10.6-rev11"
        },
        {
            "introduced": "7.10.6-rev12"
        },
        {
            "last_affected": "7.10.6-rev12"
        },
        {
            "introduced": "7.10.6-rev13"
        },
        {
            "last_affected": "7.10.6-rev13"
        },
        {
            "introduced": "7.10.6-rev14"
        },
        {
            "last_affected": "7.10.6-rev14"
        },
        {
            "introduced": "7.10.6-rev15"
        },
        {
            "last_affected": "7.10.6-rev15"
        },
        {
            "introduced": "7.10.6-rev16"
        },
        {
            "last_affected": "7.10.6-rev16"
        },
        {
            "introduced": "7.10.6-rev17"
        },
        {
            "last_affected": "7.10.6-rev17"
        },
        {
            "introduced": "7.10.6-rev18"
        },
        {
            "last_affected": "7.10.6-rev18"
        },
        {
            "introduced": "7.10.6-rev19"
        },
        {
            "last_affected": "7.10.6-rev19"
        },
        {
            "introduced": "7.10.6-rev20"
        },
        {
            "last_affected": "7.10.6-rev20"
        },
        {
            "introduced": "7.10.6-rev21"
        },
        {
            "last_affected": "7.10.6-rev21"
        },
        {
            "introduced": "7.10.6-rev22"
        },
        {
            "last_affected": "7.10.6-rev22"
        },
        {
            "introduced": "7.10.6-rev23"
        },
        {
            "last_affected": "7.10.6-rev23"
        },
        {
            "introduced": "7.10.6-rev24"
        },
        {
            "last_affected": "7.10.6-rev24"
        },
        {
            "introduced": "7.10.6-rev25"
        },
        {
            "last_affected": "7.10.6-rev25"
        },
        {
            "introduced": "7.10.6-rev26"
        },
        {
            "last_affected": "7.10.6-rev26"
        },
        {
            "introduced": "7.10.6-rev27"
        },
        {
            "last_affected": "7.10.6-rev27"
        },
        {
            "introduced": "7.10.6-rev28"
        },
        {
            "last_affected": "7.10.6-rev28"
        },
        {
            "introduced": "7.10.6-rev29"
        },
        {
            "last_affected": "7.10.6-rev29"
        },
        {
            "introduced": "7.10.6-rev30"
        },
        {
            "last_affected": "7.10.6-rev30"
        },
        {
            "introduced": "7.10.6-rev31"
        },
        {
            "last_affected": "7.10.6-rev31"
        },
        {
            "introduced": "7.10.6-rev32"
        },
        {
            "last_affected": "7.10.6-rev32"
        },
        {
            "introduced": "7.10.6-rev33"
        },
        {
            "last_affected": "7.10.6-rev33"
        },
        {
            "introduced": "7.10.6-rev34"
        },
        {
            "last_affected": "7.10.6-rev34"
        }
    ]
}

Affected versions

7.*
7.10.0-0
7.10.0-2
7.10.3-0
7.10.4-0
7.10.4-1
7.10.5-0
7.10.5-1
7.10.5-2
7.10.6-NA
7.10.6-rev10
7.10.6-rev11
7.10.6-rev12
7.10.6-rev13
7.10.6-rev14
7.10.6-rev15
7.10.6-rev16
7.10.6-rev17
7.10.6-rev18
7.10.6-rev19
7.10.6-rev20
7.10.6-rev21
7.10.6-rev22
7.10.6-rev23
7.10.6-rev24
7.10.6-rev25
7.10.6-rev26
7.10.6-rev27
7.10.6-rev28
7.10.6-rev29
7.10.6-rev30
7.10.6-rev31
7.10.6-rev32
7.10.6-rev33
7.10.6-rev34
Other
as-next

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-41710.json"