CVE-2023-26443

Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitization in place, this can be abused to trigger benign SQL Exceptions but could potentially be escalated to a malicious SQL injection vulnerability. We now properly encode single...

CVE-2023-26443

Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitization in place, this can be abused to trigger benign SQL Exceptions but could potentially be escalated to a malicious SQL injection vulnerability. We now properly encode single...

CVE-2023-26443

The CVE-2023-26443 issue affects Open-Xchange AppSuite, stemming from a vulnerability in the Full-text autocomplete search that allowed user-supplied SQL syntax to be injected into SQL statements. Despite sanitization, this could trigger benign SQL exceptions and, in theory, escalate to a malicio...