| |
Vulnerability CVE-2022-43699
Published: 2023-04-15
| Description: |
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address). |
References: |
https://seclists.org/fulldisclosure/2023/Feb/3
https://open-xchange.com
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
