CVE-2021-23929 – OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uplo …

Vuln ID: CVE-2021-23929

Published:  2021-01-12  22:15:12Z

Description: OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.

Source: NVD.NIST.GOV