CVE-2023-24597

Published: May 29, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

OX App Suite before frontend 7.10.6-rev24 allows the loading (without user consent) of an e-mail message's remote resources during printing.

Affected (25)

Products: Open Xchange: Ox App Suite

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Open Xchange Ox App Suite	Before 7.10.6
Open Xchange Ox App Suite	Version 7.10.6
Open Xchange Ox App Suite	Version 7.10.6 rev01
Open Xchange Ox App Suite	Version 7.10.6 rev02
Open Xchange Ox App Suite	Version 7.10.6 rev03
Open Xchange Ox App Suite	Version 7.10.6 rev04
Open Xchange Ox App Suite	Version 7.10.6 rev05
Open Xchange Ox App Suite	Version 7.10.6 rev06
Open Xchange Ox App Suite	Version 7.10.6 rev07
Open Xchange Ox App Suite	Version 7.10.6 rev08
Open Xchange Ox App Suite	Version 7.10.6 rev09
Open Xchange Ox App Suite	Version 7.10.6 rev10
Open Xchange Ox App Suite	Version 7.10.6 rev11
Open Xchange Ox App Suite	Version 7.10.6 rev12
Open Xchange Ox App Suite	Version 7.10.6 rev13
Open Xchange Ox App Suite	Version 7.10.6 rev14
Open Xchange Ox App Suite	Version 7.10.6 rev15
Open Xchange Ox App Suite	Version 7.10.6 rev16
Open Xchange Ox App Suite	Version 7.10.6 rev17
Open Xchange Ox App Suite	Version 7.10.6 rev18
Open Xchange Ox App Suite	Version 7.10.6 rev19
Open Xchange Ox App Suite	Version 7.10.6 rev20
Open Xchange Ox App Suite	Version 7.10.6 rev21
Open Xchange Ox App Suite	Version 7.10.6 rev22
Open Xchange Ox App Suite	Version 7.10.6 rev23

References (4)

http://seclists.org/fulldisclosure/2023/May/3

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://open-xchange.com

Source: cve@mitre.org

Product

http://seclists.org/fulldisclosure/2023/May/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://open-xchange.com

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.