CVE-2023-26429 LOW

CVE-2023-26429

Vendor Ox Software Gmbh
Product OX App Suite
Weakness CWE-77
Published June 20, 2023
Last update August 2, 2024

CVSS base score

3.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Control characters were not removed when exporting user feedback content. This allowed attackers to include unexpected content via user feedback and potentially break the exported data structure. We now drop all control characters that are not whitespace character during the export. No publicly available exploits are known.

Key dates

02Disclosure timeline

June 20, 2023 CVE published
August 2, 2024 Record updated