CVE-2016-4048

CVE-2016-4048 describes a vulnerability in Open-Xchange OX App Suite versions prior to 7.8.1-rev11, where custom login screen messages intended for sharing link notifications can be manipulated. Attackers can inject arbitrary text, enabling social engineering attacks by tricking users into following malicious instructions. This vulnerability has a CVSS score of 4.3 (MEDIUM), indicating a network-based attack with low complexity requiring user interaction, potentially leading to a loss of confidentiality. The FAUCET Risk Score is 10/100, suggesting a relatively low overall risk. There is no evidence of active exploitation, no known exploit code in Metasploit, Nuclei, or ExploitDB, and minimal community discussion or media coverage, indicating it has not garnered significant attention.