CVE-2022-37313

Published: Dec 26, 2022Modified: Apr 14, 2025

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Affected (53)

Products: Open Xchange: Open Xchange Appsuite

Open Xchange

1 product

Open Xchange Appsuite

Configuration A

53 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Open Xchange Appsuite	Before 7.10.5
Open Xchange Open Xchange Appsuite	Version 7.10.5
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5961
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5973
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5976
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5982
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5989
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_5994
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6000
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6003
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6008
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6010
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6016
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6020
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6026
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6029
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6034
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6035
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6038
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6046
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6051
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6053
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6060
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6061
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6066
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6068
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6072
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6079
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6084
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6092
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6101
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6111
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6120
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6132
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6137
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6140
Open Xchange Open Xchange Appsuite	Version 7.10.5 patch_release_6149
Open Xchange Open Xchange Appsuite	Version 7.10.6
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6069
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6073
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6080
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6085
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6093
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6102
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6112
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6121
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6133
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6138
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6141
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6146
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6147
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6148
Open Xchange Open Xchange Appsuite	Version 7.10.6 patch_release_6150