CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: the backend component in open-xchange ox app suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-06-16
Last Modified Date: 2019-10-03