CVE-2013-1648

2022-10-0316:14:48

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-1648

open-xchange server

subscriptions feature

tcp traffic

ssrf

security vulnerability

nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.0%

JSON

The Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not properly validate the publication-source URL, which allows remote authenticated users to trigger arbitrary outbound TCP traffic via a crafted Source field, as demonstrated by (1) an ftp: URL, (2) a gopher: URL, or (3) an http://127.0.0.1/ URL, related to a “Server-side request forging (SSRF)” issue.

Affected configurations

NVD

Node

open-xchangeopen-xchange_serverMatch6.20.7

open-xchangeopen-xchange_serverMatch6.22.0

open-xchangeopen-xchange_serverMatch6.22.1

CPENameOperatorVersion
open-xchange:open-xchange_serveropen-xchange open-xchange servereq6.20.7
open-xchange:open-xchange_serveropen-xchange open-xchange servereq6.22.0
open-xchange:open-xchange_serveropen-xchange open-xchange servereq6.22.1

CPE	Name	Operator	Version
open-xchange:open-xchange_server	open-xchange open-xchange server	eq	6.20.7
open-xchange:open-xchange_server	open-xchange open-xchange server	eq	6.22.0
open-xchange:open-xchange_server	open-xchange open-xchange server	eq	6.22.1