4.3

CVE-2023-24599

OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open-xchange ≫ Ox App Suite Version < 7.10.6
Open-xchange ≫ Ox App Suite Version 7.10.6 Update -
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev01
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev02
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev03
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev04
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev05
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev06
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev07
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev08
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev09
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev10
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev11
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev12
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev13
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev14
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev15
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev16
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev17
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev18
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev19
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev20
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev21
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev22
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev23
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev24
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev25
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev26
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev27
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev28
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev29
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev30
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev31
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev32
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev33
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev34
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev35
Open-xchange ≫ Ox App Suite Version 7.10.6 Update rev36
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

https://open-xchange.com
Product
http://seclists.org/fulldisclosure/2023/May/3
Third Party Advisory
Mailing List