CVE-2022-43698

open-xchange ox app suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-43698

Katalog CVE

CVSS 4.3 · Medium EPSS 0,46%

Kerentanan Server-Side Request Forgery (SSRF) pada open-xchange ox app suite. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list.

Rincian

Terbit di NVD
15 April 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-918: Server-Side Request Forgery (SSRF)
EPSS (30 hari)
0,46% peluang dieksploitasi; lebih tinggi dari 38,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange ox app suite Semua versi sebelum 7.10.6
open-xchange ox app suite Versi 7.10.6
open-xchange ox app suite Versi 7.10.6 rev01
open-xchange ox app suite Versi 7.10.6 rev02
open-xchange ox app suite Versi 7.10.6 rev03
open-xchange ox app suite Versi 7.10.6 rev04
open-xchange ox app suite Versi 7.10.6 rev05
open-xchange ox app suite Versi 7.10.6 rev06
open-xchange ox app suite Versi 7.10.6 rev07
open-xchange ox app suite Versi 7.10.6 rev08
open-xchange ox app suite Versi 7.10.6 rev09
open-xchange ox app suite Versi 7.10.6 rev10
open-xchange ox app suite Versi 7.10.6 rev11
open-xchange ox app suite Versi 7.10.6 rev12
open-xchange ox app suite Versi 7.10.6 rev13
open-xchange ox app suite Versi 7.10.6 rev14
open-xchange ox app suite Versi 7.10.6 rev15
open-xchange ox app suite Versi 7.10.6 rev16
open-xchange ox app suite Versi 7.10.6 rev17
open-xchange ox app suite Versi 7.10.6 rev18
open-xchange ox app suite Versi 7.10.6 rev19
open-xchange ox app suite Versi 7.10.6 rev20
open-xchange ox app suite Versi 7.10.6 rev21
open-xchange ox app suite Versi 7.10.6 rev22
open-xchange ox app suite Versi 7.10.6 rev23
open-xchange ox app suite Versi 7.10.6 rev24
open-xchange ox app suite Versi 7.10.6 rev25
open-xchange ox app suite Versi 7.10.6 rev26
open-xchange ox app suite Versi 7.10.6 rev27
open-xchange ox app suite Versi 7.10.6 rev28
open-xchange ox app suite Versi 7.10.6 rev29

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.