CVE-2021-33488

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Nov 22, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-334896.1OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.CVE-2021-33493.3GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution CVE-2021-334906.1OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.CVE-2021-334916.5OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths CVE-2021-334926.1OX App Suite 7.10.5 allows XSS via an OX Chat room name.CVE-2021-334936.0The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.CVE-2021-334946.1OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.CVE-2021-334956.1OX App Suite 7.10.5 allows XSS via an OX Chat system message.CVE-2021-334966.1Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.CVE-2021-334979.1Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.CVE-2021-334987.5Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).CVE-2021-334997.5Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).