CVE-2022-43698: SSRF
Published Apr 15, 2023
·Updated
OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list.
Affected Software
31 affected components
Open-Xchange Ox App Suite<7.10.6
Open-Xchange Ox App Suite=7.10.6
Open-Xchange Ox App Suite=7.10.6-rev01
Open-Xchange Ox App Suite=7.10.6-rev02
Open-Xchange Ox App Suite=7.10.6-rev03
Open-Xchange Ox App Suite=7.10.6-rev04
Open-Xchange Ox App Suite=7.10.6-rev05
Open-Xchange Ox App Suite=7.10.6-rev06
Open-Xchange Ox App Suite=7.10.6-rev07
Open-Xchange Ox App Suite=7.10.6-rev08
Open-Xchange Ox App Suite=7.10.6-rev09
Open-Xchange Ox App Suite=7.10.6-rev10
Open-Xchange Ox App Suite=7.10.6-rev11
Open-Xchange Ox App Suite=7.10.6-rev12
Open-Xchange Ox App Suite=7.10.6-rev13
Open-Xchange Ox App Suite=7.10.6-rev14
Open-Xchange Ox App Suite=7.10.6-rev15
Open-Xchange Ox App Suite=7.10.6-rev16
Open-Xchange Ox App Suite=7.10.6-rev17
Open-Xchange Ox App Suite=7.10.6-rev18
Open-Xchange Ox App Suite=7.10.6-rev19
Open-Xchange Ox App Suite=7.10.6-rev20
Open-Xchange Ox App Suite=7.10.6-rev21
Open-Xchange Ox App Suite=7.10.6-rev22
Open-Xchange Ox App Suite=7.10.6-rev23
Open-Xchange Ox App Suite=7.10.6-rev24
Open-Xchange Ox App Suite=7.10.6-rev25
Open-Xchange Ox App Suite=7.10.6-rev26
Open-Xchange Ox App Suite=7.10.6-rev27
Open-Xchange Ox App Suite=7.10.6-rev28
Open-Xchange Ox App Suite=7.10.6-rev29
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-43698?
CVE-2022-43698 is a vulnerability in OX App Suite before 7.10.6-rev30 that allows Server-Side Request Forgery (SSRF) when changing a POP3 account disregards the deny-list.
2
Which software versions are affected by CVE-2022-43698?
OX App Suite versions up to and including 7.10.6-rev30 are affected by CVE-2022-43698.
3
What is the severity of CVE-2022-43698?
CVE-2022-43698 has a severity rating of 4.3 (medium).
4
How can I fix CVE-2022-43698?
To fix CVE-2022-43698, update OX App Suite to version 7.10.6-rev30 or higher.
5
Where can I find more information about CVE-2022-43698?
More information about CVE-2022-43698 can be found at the following references: [link1](https://open-xchange.com), [link2](https://seclists.org/fulldisclosure/2023/Feb/3).