medium4.3
CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls th…
Impact
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Xchange | Ox App Suite | before 7.10.6 Version 7.10.6 |