medium4.3
CVE-2023-24600
OX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for reading contacts) via a move to their own address book.
Impact
OX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for reading contacts) via a move to their own address book.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Xchange | Ox App Suite | before 7.10.6 Version 7.10.6 |