Ox App Suite

Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known

Published: 2025-11-27T09:23:09.932Z
Updated: 2025-12-01T21:10:02.927Z

Malicious e-mail content can be used to execute script code. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Sanitization has been updated to avoid such bypasses. No publicly available exploits are known

Published: 2025-11-27T09:23:09.153Z
Updated: 2025-12-01T21:10:41.076Z

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedure. No publicly available exploits are known

Published: 2025-10-31T08:54:42.202Z
Updated: 2025-10-31T18:27:58.679Z

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known

Published: 2025-11-27T09:23:08.308Z
Updated: 2025-12-03T16:34:44.062Z

Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known

Published: 2025-10-31T08:54:41.426Z
Updated: 2025-10-31T18:10:29.713Z