Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2023-26452

🗓️ 02 Nov 2023 14:15:10Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 8 Views

Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2023-26452
2 Nov 202317:22
–circl
CNNVD		Open-Xchange App Suite SQL Injection Vulnerability
2 Nov 202300:00
–cnnvd
CVE		CVE-2023-26452
2 Nov 202313:00
–cve
Cvelist		CVE-2023-26452
2 Nov 202313:00
–cvelist
EUVD		EUVD-2023-30272
3 Oct 202520:07
–euvd
Prion		Design/Logic Flaw
2 Nov 202314:15
–prion
Positive Technologies		PT-2023-20645 · Unknown · Imageconverter Service
2 Nov 202300:00
–ptsecurity
RedhatCVE		CVE-2023-26452
23 May 202505:38
–redhatcve
NVD
Node
open-xchangeopen-xchange_appsuiteRange<7.10.6
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6-
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6069
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6073
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6080
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6085
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6093
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6102
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6112
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6121
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6133
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6138
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6141
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6146
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6147
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6148
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6150
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6156
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6161
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6166
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6173
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6176
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6178
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6189
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6194
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6199
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6204
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6205
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6209
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6210
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6214
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6215
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6216
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6218
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6219
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6220
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6227
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6230
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6233
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6235
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6236
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6239
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6241

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 07:51Current
8.1High risk
Vulners AI Score8.1
CVSS 3.17.6 - 8.8
EPSS0.00055
CWE-89
image cachingsql injectionnetwork accessdatabase securityapi requests
8