Server side request forgery (ssrf)

2022-12-2602:15:00

PRIOn knowledge base

www.prio-n.com

server side request forgery

ox app suite

ssrf protection mechanism

dns record

nvd

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.7%

JSON

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

CPENameOperatorVersion
open-xchange_appsuitelt7.10.5
open-xchange_appsuiteeq7.10.5 patchrelease6149
open-xchange_appsuiteeq7.10.5 patchrelease6140
open-xchange_appsuiteeq7.10.5 patchrelease6137
open-xchange_appsuiteeq7.10.5 patchrelease6132
open-xchange_appsuiteeq7.10.5 patchrelease6120
open-xchange_appsuiteeq7.10.5 patchrelease6111
open-xchange_appsuiteeq7.10.5 patchrelease6101
open-xchange_appsuiteeq7.10.5 patchrelease6092
open-xchange_appsuiteeq7.10.5 patchrelease6084

Name	Operator	Version
open-xchange_appsuite	lt	7.10.5
open-xchange_appsuite	eq	7.10.5 patchrelease6149
open-xchange_appsuite	eq	7.10.5 patchrelease6140
open-xchange_appsuite	eq	7.10.5 patchrelease6137
open-xchange_appsuite	eq	7.10.5 patchrelease6132
open-xchange_appsuite	eq	7.10.5 patchrelease6120
open-xchange_appsuite	eq	7.10.5 patchrelease6111
open-xchange_appsuite	eq	7.10.5 patchrelease6101
open-xchange_appsuite	eq	7.10.5 patchrelease6092
open-xchange_appsuite	eq	7.10.5 patchrelease6084