Vulnerability CVE-2022-37313
Published: 2022-12-26

Description:
OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
OX App Suite 7.10.6 Cross Site Scripting / SSRF / Resource Consumption
Martin Heiland
01.12.2022

 References:
https://seclists.org/fulldisclosure/2022/Nov/18
https://open-xchange.com
Copyright 2024, cxsecurity.com

 

Back to Top