What is CVE-2016-4048?

CVE-2016-4048 is a medium-severity vulnerability in Open-Xchange Appsuite. CVSS score: 4.3/10. Published 2016-12-15.

How severe is CVE-2016-4048?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Open-Xchange Appsuite

CVE-2016-4048

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login screen to notify external users about issues with sharing links. This mechanism can be abused to inject arbitrary text messages. Users may get tricked to follow instructions injected by third parties as part of social engineering attacks.

EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Open-xchange Open-xchange_appsuite
N/a — versions n/a

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2016-4048?: CVE-2016-4048 is a medium-severity vulnerability in Open-Xchange Appsuite. CVSS score: 4.3/10. Published 2016-12-15.
How severe is CVE-2016-4048?: Medium severity. CVSS v3 base score is 4.3 out of 10.