CVE-2023-24600

2023-05-2900:00:00

mitre

www.cve.org

cve-2023-24600

authenticated users

access controls

contacts

address book

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

OX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for reading contacts) via a move to their own address book.

References

seclists.org/fulldisclosure/2023/May/3

open-xchange.com