Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-62756)

Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange (Open-xchange), a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in OX App Suite version 7.10.4 and earlier, which could be exploited by an attacker to allow XSS via a crafted contact object that is incorrectly handled in the App Suite UI of a smartphone.