Open redirect

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 does not properly check for folder-to-object association, which allows remote authenticated users to delete arbitrary tasks via the task id in a...

Open redirect

The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev20 allows remote attackers to spoof the origin of e-mails via unicode characters in the "personal part" of a 1 From or 2 Sender address...

Server side request forgery (ssrf)

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors involving non-decimal representations of IP addresses and...

CVE-2017-17062

CVE-2017-17062 affects the backend component of Open-Xchange OX App Suite. Remote authenticated users could save arbitrary user attributes due to improper privilege management. Affected versions include Open-Xchange App Suite 7.6.3-rev35 and earlier in 7.6.x, 7.8.x before 7.8.2-rev38, 7.8.3 befor...

CVE-2018-5751

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the "groups" and "users" APIs...

CVE-2018-5755

Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3-rev5, and 7.8.4 before 7.8.4-rev4 allows remote attackers to read arbitrary files via a full pathname in a formula in a spreadsheet...

CVE-2018-5754

Cross-site scripting XSS vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote attackers to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to the clipboard...

CVE-2018-5756

The CVE-2018-5756 advisory concerns the Open-Xchange OX App Suite backend. It states that the backend does not properly verify folder-to-object associations, enabling remote authenticated users to delete arbitrary tasks by supplying the task ID in a delete action to api/tasks. Affected are Open-X...

CVE-2018-5755

Open-Xchange OX App Suite readerengine contains an Absolute Path Traversal vulnerability (CVE-2018-5755). Affected are OX App Suite versions before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3-rev5, and 7.8.4 before 7.8.4-rev4. An attacker can read arbitrary files by supplying a full p...

CVE-2018-5753

The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev20 allows remote attackers to spoof the origin of e-mails via unicode characters in the "personal part" of a 1 From or 2 Sender address...

CVE-2018-5756

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 does not properly check for folder-to-object association, which allows remote authenticated users to delete arbitrary tasks via the task id in a...

CVE-2018-5752

The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors involving non-decimal representations of IP addresses and...

CVE-2018-5752

Open-Xchange OX App Suite vulnerability CVE-2018-5752 affects the backend component in versions before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22. The issue is a server-side request forgery (SSRF) via vectors involving non-decimal representations...

CVE-2018-5751

CVE-2018-5751 concerns the Open-Xchange OX App Suite backend component. The vulnerability, present in versions listed as vulnerable (before 7.6.3-rev36; 7.8.x before 7.8.2-rev39; 7.8.3 before 7.8.3-rev44; and 7.8.4 before 7.8.4-rev22), allows remote authenticated users to obtain sensitive informa...

CVE-2017-17062

The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management...

CVE-2018-5753

Open-Xchange OX App Suite contains a content spoofing vulnerability in the frontend component that allows remote attackers to spoof the origin of emails by using Unicode in the personal part of the From or Sender address. Affected versions include 7.6.3-rev31 and earlier for 7.6.x, 7.8.x prior to...

CVE-2018-5754

OX App Suite (Open-Xchange) suffers a Cross-Site Scripting (XSS) vulnerability in the office-web component. CVE-2018-5754 affects Open-Xchange OX App Suite <= 7.8.3-rev12 and 7.8.4

OX App Suite Content Spoofing Vulnerability

OX App Suite is a collection of cloud-based applications that support the management of email, contacts, calendars, media, documents and more. A content spoofing vulnerability exists in OX App Suite, which can be exploited by an attacker to support social engineering-based attacks against...

OX App Suite 7.8.4 XSS / Privilege Management / SSRF / Traversal

Dear subscribers, we've migrated our public disclosure workflow to full-disclosure and are catching up on publishing recent vulnerabilities through this channel. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange...

Open-Xchange: [XSS] RSS Feed Widget

Hi. If type == null OR type any not htm, xhtm then data not sanitize, e.g.: - - - RssAction.java: java for SyndContent content : contents String type = content.getType; if null != type && type.startsWith"htm" || type.startsWith"xhtm" foundHtml = true; String htmlContent =...