CVE:CVE-2022-31469
CNNVD:CNNVD-202211-3733
Open-Xchange OX App Suite是德国Open-Xchange公司的一个电子邮件及生产力套件客户端软件。
Open-Xchange OX App Suite 7.10.6及之前版本存在安全漏洞，该漏洞源于电子邮件中深层链接的检测机制允许注入对任意虚假应用程序的引用，当使用这些链接时，这可用于请求意外内容，可能包括脚本代码，恶意脚本代码可以在受害者上下文中执行，导致会话劫持或通过Web界面触发不需要的操作。
solution:Upgrade open-xchange open-xchange_appsuite to a higher version than 7.10.5,7.10.5,7.10.5:patch_release_5961,7.10.5:patch_release_5973,7.10.5:patch_release_5976,7.10.5:patch_release_5982,7.10.5:patch_release_5989,7.10.5:patch_release_5994,7.10.5:patch_release_6000,7.10.5:patch_release_6003,7.10.5:patch_release_6008,7.10.5:patch_release_6010,7.10.5:patch_release_6016,7.10.5:patch_release_6020,7.10.5:patch_release_6026,7.10.5:patch_release_6029,7.10.5:patch_release_6034,7.10.5:patch_release_6035,7.10.5:patch_release_6038,7.10.5:patch_release_6046,7.10.5:patch_release_6051,7.10.5:patch_release_6053,7.10.5:patch_release_6060,7.10.5:patch_release_6061,7.10.5:patch_release_6066,7.10.5:patch_release_6068,7.10.5:patch_release_6072,7.10.5:patch_release_6079,7.10.5:patch_release_6084,7.10.5:patch_release_6092,7.10.5:patch_release_6101,7.10.5:patch_release_6111,7.10.5:patch_release_6120,7.10.5:patch_release_6132,7.10.5:patch_release_6137,7.10.5:patch_release_6140,7.10.5:patch_release_6149,7.10.6,7.10.6:patch_release_6069,7.10.6:patch_release_6073,7.10.6:patch_release_6080,7.10.6:patch_release_6085,7.10.6:patch_release_6093,7.10.6:patch_release_6102,7.10.6:patch_release_6112,7.10.6:patch_release_6121,7.10.6:patch_release_6133,7.10.6:patch_release_6138,7.10.6:patch_release_6141,7.10.6:patch_release_6146,7.10.6:patch_release_6147,7.10.6:patch_release_6148,7.10.6:patch_release_6150,and avoid the version (,7.10.5),7.10.5,7.10.5:patch_release_5961,7.10.5:patch_release_5973,7.10.5:patch_release_5976,7.10.5:patch_release_5982,7.10.5:patch_release_5989,7.10.5:patch_release_5994,7.10.5:patch_release_6000,7.10.5:patch_release_6003,7.10.5:patch_release_6008,7.10.5:patch_release_6010,7.10.5:patch_release_6016,7.10.5:patch_release_6020,7.10.5:patch_release_6026,7.10.5:patch_release_6029,7.10.5:patch_release_6034,7.10.5:patch_release_6035,7.10.5:patch_release_6038,7.10.5:patch_release_6046,7.10.5:patch_release_6051,7.10.5:patch_release_6053,7.10.5:patch_release_6060,7.10.5:patch_release_6061,7.10.5:patch_release_6066,7.10.5:patch_release_6068,7.10.5:patch_release_6072,7.10.5:patch_release_6079,7.10.5:patch_release_6084,7.10.5:patch_release_6092,7.10.5:patch_release_6101,7.10.5:patch_release_6111,7.10.5:patch_release_6120,7.10.5:patch_release_6132,7.10.5:patch_release_6137,7.10.5:patch_release_6140,7.10.5:patch_release_6149,7.10.6,7.10.6:patch_release_6069,7.10.6:patch_release_6073,7.10.6:patch_release_6080,7.10.6:patch_release_6085,7.10.6:patch_release_6093,7.10.6:patch_release_6102,7.10.6:patch_release_6112,7.10.6:patch_release_6121,7.10.6:patch_release_6133,7.10.6:patch_release_6138,7.10.6:patch_release_6141,7.10.6:patch_release_6146,7.10.6:patch_release_6147,7.10.6:patch_release_6148,7.10.6:patch_release_6150