CVE-2022-37313

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2022-12-26

Last modified

2025-04-14

Weaknesses

CWE-918

Affected products

• Open-xchange Appsuite (Open-xchange)

References

• https://open-xchange.com
• https://seclists.org/fulldisclosure/2022/Nov/18