What is the severity of CVE-2022-37312?

CVE-2022-37312 has a moderate severity rating due to the potential for uncontrolled resource consumption.

How do I fix CVE-2022-37312?

To fix CVE-2022-37312, you should upgrade Open-Xchange App Suite to version 7.10.7 or later.

What software is affected by CVE-2022-37312?

CVE-2022-37312 affects Open-Xchange App Suite versions up to and including 7.10.6.

What type of vulnerability is CVE-2022-37312?

CVE-2022-37312 is categorized as a resource consumption vulnerability.

Can CVE-2022-37312 lead to a Denial of Service (DoS)?

Yes, CVE-2022-37312 can potentially result in Denial of Service due to excessive resource usage.

Vulnerability/
CVE-2022-37312

medium

5.3

CWE

1284

26/12/2022

3/8/2024

CVE-2022-37312

First published: Mon Dec 26 2022(Updated: )

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body containing a redirect URL to the deferrer servlet.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Open-Xchange App Suite Backend	<7.10.5
Open-Xchange App Suite Backend	=7.10.5
Open-Xchange App Suite Backend	=7.10.5-patch_release_5961
Open-Xchange App Suite Backend	=7.10.5-patch_release_5973
Open-Xchange App Suite Backend	=7.10.5-patch_release_5976
Open-Xchange App Suite Backend	=7.10.5-patch_release_5982
Open-Xchange App Suite Backend	=7.10.5-patch_release_5989
Open-Xchange App Suite Backend	=7.10.5-patch_release_5994
Open-Xchange App Suite Backend	=7.10.5-patch_release_6000
Open-Xchange App Suite Backend	=7.10.5-patch_release_6003
Open-Xchange App Suite Backend	=7.10.5-patch_release_6008
Open-Xchange App Suite Backend	=7.10.5-patch_release_6010
Open-Xchange App Suite Backend	=7.10.5-patch_release_6016
Open-Xchange App Suite Backend	=7.10.5-patch_release_6020
Open-Xchange App Suite Backend	=7.10.5-patch_release_6026
Open-Xchange App Suite Backend	=7.10.5-patch_release_6029
Open-Xchange App Suite Backend	=7.10.5-patch_release_6034
Open-Xchange App Suite Backend	=7.10.5-patch_release_6035
Open-Xchange App Suite Backend	=7.10.5-patch_release_6038
Open-Xchange App Suite Backend	=7.10.5-patch_release_6046
Open-Xchange App Suite Backend	=7.10.5-patch_release_6051
Open-Xchange App Suite Backend	=7.10.5-patch_release_6053
Open-Xchange App Suite Backend	=7.10.5-patch_release_6060
Open-Xchange App Suite Backend	=7.10.5-patch_release_6061
Open-Xchange App Suite Backend	=7.10.5-patch_release_6066
Open-Xchange App Suite Backend	=7.10.5-patch_release_6068
Open-Xchange App Suite Backend	=7.10.5-patch_release_6072
Open-Xchange App Suite Backend	=7.10.5-patch_release_6079
Open-Xchange App Suite Backend	=7.10.5-patch_release_6084
Open-Xchange App Suite Backend	=7.10.5-patch_release_6092
Open-Xchange App Suite Backend	=7.10.5-patch_release_6101
Open-Xchange App Suite Backend	=7.10.5-patch_release_6111
Open-Xchange App Suite Backend	=7.10.5-patch_release_6120
Open-Xchange App Suite Backend	=7.10.5-patch_release_6132
Open-Xchange App Suite Backend	=7.10.5-patch_release_6137
Open-Xchange App Suite Backend	=7.10.5-patch_release_6140
Open-Xchange App Suite Backend	=7.10.5-patch_release_6149
Open-Xchange App Suite Backend	=7.10.6
Open-Xchange App Suite Backend	=7.10.6-patch_release_6069
Open-Xchange App Suite Backend	=7.10.6-patch_release_6073
Open-Xchange App Suite Backend	=7.10.6-patch_release_6080
Open-Xchange App Suite Backend	=7.10.6-patch_release_6085
Open-Xchange App Suite Backend	=7.10.6-patch_release_6093
Open-Xchange App Suite Backend	=7.10.6-patch_release_6102
Open-Xchange App Suite Backend	=7.10.6-patch_release_6112
Open-Xchange App Suite Backend	=7.10.6-patch_release_6121
Open-Xchange App Suite Backend	=7.10.6-patch_release_6133
Open-Xchange App Suite Backend	=7.10.6-patch_release_6138
Open-Xchange App Suite Backend	=7.10.6-patch_release_6141
Open-Xchange App Suite Backend	=7.10.6-patch_release_6146
Open-Xchange App Suite Backend	=7.10.6-patch_release_6147
Open-Xchange App Suite Backend	=7.10.6-patch_release_6148
Open-Xchange App Suite Backend	=7.10.6-patch_release_6150

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-37312?
CVE-2022-37312 has a moderate severity rating due to the potential for uncontrolled resource consumption.
How do I fix CVE-2022-37312?
To fix CVE-2022-37312, you should upgrade Open-Xchange App Suite to version 7.10.7 or later.
What software is affected by CVE-2022-37312?
CVE-2022-37312 affects Open-Xchange App Suite versions up to and including 7.10.6.
What type of vulnerability is CVE-2022-37312?
CVE-2022-37312 is categorized as a resource consumption vulnerability.
Can CVE-2022-37312 lead to a Denial of Service (DoS)?
Yes, CVE-2022-37312 can potentially result in Denial of Service due to excessive resource usage.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/open-xchange
canonical/open-xchange app suite backend
version/open-xchange app suite backend/7.10.5
version/open-xchange app suite backend/7.10.5-patch_release_5961
version/open-xchange app suite backend/7.10.5-patch_release_5973
version/open-xchange app suite backend/7.10.5-patch_release_5976
version/open-xchange app suite backend/7.10.5-patch_release_5982
version/open-xchange app suite backend/7.10.5-patch_release_5989
version/open-xchange app suite backend/7.10.5-patch_release_5994
version/open-xchange app suite backend/7.10.5-patch_release_6000
version/open-xchange app suite backend/7.10.5-patch_release_6003
version/open-xchange app suite backend/7.10.5-patch_release_6008
version/open-xchange app suite backend/7.10.5-patch_release_6010
version/open-xchange app suite backend/7.10.5-patch_release_6016
version/open-xchange app suite backend/7.10.5-patch_release_6020
version/open-xchange app suite backend/7.10.5-patch_release_6026
version/open-xchange app suite backend/7.10.5-patch_release_6029
version/open-xchange app suite backend/7.10.5-patch_release_6034
version/open-xchange app suite backend/7.10.5-patch_release_6035
version/open-xchange app suite backend/7.10.5-patch_release_6038
version/open-xchange app suite backend/7.10.5-patch_release_6046
version/open-xchange app suite backend/7.10.5-patch_release_6051
version/open-xchange app suite backend/7.10.5-patch_release_6053
version/open-xchange app suite backend/7.10.5-patch_release_6060
version/open-xchange app suite backend/7.10.5-patch_release_6061
version/open-xchange app suite backend/7.10.5-patch_release_6066
version/open-xchange app suite backend/7.10.5-patch_release_6068
version/open-xchange app suite backend/7.10.5-patch_release_6072
version/open-xchange app suite backend/7.10.5-patch_release_6079
version/open-xchange app suite backend/7.10.5-patch_release_6084
version/open-xchange app suite backend/7.10.5-patch_release_6092
version/open-xchange app suite backend/7.10.5-patch_release_6101
version/open-xchange app suite backend/7.10.5-patch_release_6111
version/open-xchange app suite backend/7.10.5-patch_release_6120
version/open-xchange app suite backend/7.10.5-patch_release_6132
version/open-xchange app suite backend/7.10.5-patch_release_6137
version/open-xchange app suite backend/7.10.5-patch_release_6140
version/open-xchange app suite backend/7.10.5-patch_release_6149
version/open-xchange app suite backend/7.10.6
version/open-xchange app suite backend/7.10.6-patch_release_6069
version/open-xchange app suite backend/7.10.6-patch_release_6073
version/open-xchange app suite backend/7.10.6-patch_release_6080
version/open-xchange app suite backend/7.10.6-patch_release_6085
version/open-xchange app suite backend/7.10.6-patch_release_6093
version/open-xchange app suite backend/7.10.6-patch_release_6102
version/open-xchange app suite backend/7.10.6-patch_release_6112
version/open-xchange app suite backend/7.10.6-patch_release_6121
version/open-xchange app suite backend/7.10.6-patch_release_6133
version/open-xchange app suite backend/7.10.6-patch_release_6138
version/open-xchange app suite backend/7.10.6-patch_release_6141
version/open-xchange app suite backend/7.10.6-patch_release_6146
version/open-xchange app suite backend/7.10.6-patch_release_6147
version/open-xchange app suite backend/7.10.6-patch_release_6148
version/open-xchange app suite backend/7.10.6-patch_release_6150

CVE-2022-37312

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-37312?

How do I fix CVE-2022-37312?

What software is affected by CVE-2022-37312?

What type of vulnerability is CVE-2022-37312?

Can CVE-2022-37312 lead to a Denial of Service (DoS)?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2022-37312?

How do I fix CVE-2022-37312?

What software is affected by CVE-2022-37312?

What type of vulnerability is CVE-2022-37312?

Can CVE-2022-37312 lead to a Denial of Service (DoS)?