CVE-2018-12609

OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...

CVE-2018-12609

OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...

CVE-2018-12609

OX App Suite (Open-Xchange) 7.8.4 and earlier is affected by a server-side request forgery (SSRF) in the backend content handling. Exploitation could cause the server to fetch arbitrary resources. Remediation: upgrade to 7.8.4-rev34 or 7.8.3-rev49 (fixed versions).

Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product:...