medium4.2
CVE-2023-24605
OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens.
Impact
OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Xchange | Ox App Suite | before 7.10.6 Version 7.10.6 |