CVE-2023-26440

CVE-2023-26440 concerns the Open-Xchange AppSuite cacheservice API, where parameters could be injected with SQL syntax due to insufficient sanitization when creating new cache groups. The vulnerability allows attackers with access to a local or restricted network to perform arbitrary SQL queries....

CVE-2023-26439

The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement. Attackers with access to a local or restricted network were able to perform arbitrary SQL queries, discovering other users cached data. We have...

CVE-2023-26439

The CVE-2023-26439 issue affects the Open-Xchange AppSuite, specifically the cacheservice API. A SQL injection vulnerability arises from insufficient sanitization of parameters in API calls, enabling attackers with local or restricted network access to execute arbitrary SQL queries and potentiall...

PT-2023-20633 · Unknown · Cacheservice

Name of the Vulnerable Software and Affected Versions: cacheservice affected versions not specified Description: The cacheservice API could be exploited to indirectly inject parameters with SQL syntax that was not properly sanitized, allowing attackers to execute arbitrary SQL queries when creati...

PT-2023-20635 · Unknown · Cacheservice

Name of the Vulnerable Software and Affected Versions: Cacheservice affected versions not specified Description: The issue arises when Cacheservice is configured to use a sproxyd object-storage backend, allowing it to follow HTTP redirects issued by that backend. An attacker with access to a loca...

Open-Xchange AppSuite Code Issue Vulnerability

Open-Xchange AppSuite is a set of Web cloud desktop environments from Open-Xchange Germany. The environment allows users to more intuitively manage email, tasks, files, and more. A code issue vulnerability exists in Open-Xchange AppSuite that stems from a Server Request Forgery SSRF vulnerability...

PT-2023-20631 · Unknown · Cacheservice

Name of the Vulnerable Software and Affected Versions: cacheservice affected versions not specified Description: The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement. Attackers with access to a local ...

Open-Xchange AppSuite SQL Injection Vulnerability

Open-Xchange AppSuite is a set of Web cloud desktop environments from Open-Xchange Germany. The environment allows users to more intuitively manage email, tasks, files, and more. An SQL injection vulnerability exists in Open-Xchange App Suite, which stems from an SQL injection vulnerability in th...