Unrated severityNVD Advisory· Published Feb 12, 2024· Updated Nov 4, 2025
CVE-2023-41703
CVE-2023-41703
Description
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avoid potentially malicious content. No publicly available exploits are known.
Affected products
2- Range: <7.10.6
- Open-Xchange GmbH/OX App Suitev5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.