CVE-2023-29051
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API. The existing switch to disable the feature by default was not effective in this case. Unauthorized users could discover and modify application state, including objects related to other users and contexts. We now make sure that the switch to disable user-generated templates by default works as intended and will remove the feature in future generations of the product. No publicly available exploits are known.
Se pueden utilizar plantillas OXMF definidas por el usuario para acceder a una parte limitada de la API Java interna de OX App Suite. El interruptor existente para desactivar la función de forma predeterminada no fue efectivo en este caso. Los usuarios no autorizados podrían descubrir y modificar el estado de la aplicación, incluidos objetos relacionados con otros usuarios y contextos. Ahora nos aseguramos de que el cambio para deshabilitar las plantillas generadas por el usuario de forma predeterminada funcione según lo previsto y eliminará la función en generaciones futuras del producto. No se conocen exploits disponibles públicamente.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-30 CVE Reserved
- 2024-01-08 CVE Published
- 2024-08-02 CVE Updated
- 2025-01-14 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6251_7.10.6_2023-09-25.pdf | Release Notes |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | < 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version " < 7.10.6" | - |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | - |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev01 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev02 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev03 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev04 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev05 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev06 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev07 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev08 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev09 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev10 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev11 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev12 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev13 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev14 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev15 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev16 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev17 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev18 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev19 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev20 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev21 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev22 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev23 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev24 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev25 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev26 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev27 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev28 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev29 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev30 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev31 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev32 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev33 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev34 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev35 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev36 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev37 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 7.10.6 Search vendor "Open-xchange" for product "Ox App Suite" and version "7.10.6" | rev50 |
Affected
| ||||||
| Open-xchange Search vendor "Open-xchange" | Ox App Suite Search vendor "Open-xchange" for product "Ox App Suite" | 8.17 Search vendor "Open-xchange" for product "Ox App Suite" and version "8.17" | - |
Affected
| ||||||