CVE-2023-24598: Medium severity open-xchange app suite backend vulnerability
Published May 29, 2023
·Updated
OX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lists, e.g., partial disclosure of the private contacts of another user.
Affected Software
38 affected components
Open-Xchange Ox App Suite=7.10.6-rev01
Open-Xchange Ox App Suite=7.10.6-rev02
Open-Xchange Ox App Suite=7.10.6-rev03
Open-Xchange Ox App Suite=7.10.6-rev04
Open-Xchange Ox App Suite=7.10.6-rev05
Open-Xchange Ox App Suite=7.10.6-rev06
Open-Xchange Ox App Suite=7.10.6-rev07
Open-Xchange Ox App Suite=7.10.6-rev08
Open-Xchange Ox App Suite=7.10.6-rev09
Open-Xchange Ox App Suite=7.10.6-rev10
Open-Xchange Ox App Suite=7.10.6-rev11
Open-Xchange Ox App Suite=7.10.6-rev12
Open-Xchange Ox App Suite=7.10.6-rev13
Open-Xchange Ox App Suite=7.10.6-rev14
Open-Xchange Ox App Suite=7.10.6-rev15
Open-Xchange Ox App Suite=7.10.6-rev16
Open-Xchange Ox App Suite=7.10.6-rev17
Open-Xchange Ox App Suite=7.10.6-rev18
Open-Xchange Ox App Suite=7.10.6-rev19
Open-Xchange Ox App Suite=7.10.6-rev20
Open-Xchange Ox App Suite=7.10.6-rev21
Open-Xchange Ox App Suite=7.10.6-rev22
Open-Xchange Ox App Suite=7.10.6-rev23
Open-Xchange Ox App Suite=7.10.6-rev24
Open-Xchange Ox App Suite=7.10.6-rev25
Open-Xchange Ox App Suite=7.10.6-rev26
Open-Xchange Ox App Suite=7.10.6-rev27
Open-Xchange Ox App Suite=7.10.6-rev28
Open-Xchange Ox App Suite=7.10.6-rev29
Open-Xchange Ox App Suite=7.10.6-rev30
Open-Xchange Ox App Suite<7.10.6
Open-Xchange Ox App Suite=7.10.6
Open-Xchange Ox App Suite=7.10.6-rev36
Open-Xchange Ox App Suite=7.10.6-rev35
Open-Xchange Ox App Suite=7.10.6-rev34
Open-Xchange Ox App Suite=7.10.6-rev33
Open-Xchange Ox App Suite=7.10.6-rev32
Open-Xchange Ox App Suite=7.10.6-rev31
Event History
May 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-24598?
CVE-2023-24598 is a vulnerability in OX App Suite before backend 7.10.6-rev37 that leads to an information leak in the handling of distribution lists, resulting in partial disclosure of the private contacts of another user.
2
What is the severity of CVE-2023-24598?
CVE-2023-24598 has a severity level of medium with a CVSS score of 4.0.
3
How does CVE-2023-24598 affect OX App Suite?
CVE-2023-24598 affects OX App Suite versions before backend 7.10.6-rev37.
4
What is the fix for CVE-2023-24598?
To fix CVE-2023-24598, update OX App Suite to version 7.10.6-rev37 or later.
5
Where can I find more information about CVE-2023-24598?
More information about CVE-2023-24598 can be found at https://open-xchange.com and http://seclists.org/fulldisclosure/2023/May/3.