NetSight
medium5.3

CVE-2022-37313

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Impact

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Affected products

VendorProductAffected versions
Open-XchangeOpen-Xchange Appsuite
before 7.10.5
Versions 7.10.5, 7.10.6

Weakness classification

References