CVE-2023-24598

open-xchange ox app suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-24598

Katalog CVE

CVSS 4.3 · Medium EPSS 0,52%

Kerentanan Observable Discrepancy pada open-xchange ox app suite. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lists, e.g., partial disclosure of the private contacts of another user.

Rincian

Terbit di NVD
29 Mei 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-203: Observable Discrepancy
EPSS (30 hari)
0,52% peluang dieksploitasi; lebih tinggi dari 42,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange ox app suite Semua versi sebelum 7.10.6
open-xchange ox app suite Versi 7.10.6
open-xchange ox app suite Versi 7.10.6 rev01
open-xchange ox app suite Versi 7.10.6 rev02
open-xchange ox app suite Versi 7.10.6 rev03
open-xchange ox app suite Versi 7.10.6 rev04
open-xchange ox app suite Versi 7.10.6 rev05
open-xchange ox app suite Versi 7.10.6 rev06
open-xchange ox app suite Versi 7.10.6 rev07
open-xchange ox app suite Versi 7.10.6 rev08
open-xchange ox app suite Versi 7.10.6 rev09
open-xchange ox app suite Versi 7.10.6 rev10
open-xchange ox app suite Versi 7.10.6 rev11
open-xchange ox app suite Versi 7.10.6 rev12
open-xchange ox app suite Versi 7.10.6 rev13
open-xchange ox app suite Versi 7.10.6 rev14
open-xchange ox app suite Versi 7.10.6 rev15
open-xchange ox app suite Versi 7.10.6 rev16
open-xchange ox app suite Versi 7.10.6 rev17
open-xchange ox app suite Versi 7.10.6 rev18
open-xchange ox app suite Versi 7.10.6 rev19
open-xchange ox app suite Versi 7.10.6 rev20
open-xchange ox app suite Versi 7.10.6 rev21
open-xchange ox app suite Versi 7.10.6 rev22
open-xchange ox app suite Versi 7.10.6 rev23
open-xchange ox app suite Versi 7.10.6 rev24
open-xchange ox app suite Versi 7.10.6 rev25
open-xchange ox app suite Versi 7.10.6 rev26
open-xchange ox app suite Versi 7.10.6 rev27
open-xchange ox app suite Versi 7.10.6 rev28
open-xchange ox app suite Versi 7.10.6 rev29
open-xchange ox app suite Versi 7.10.6 rev30
open-xchange ox app suite Versi 7.10.6 rev31
open-xchange ox app suite Versi 7.10.6 rev32
open-xchange ox app suite Versi 7.10.6 rev33
open-xchange ox app suite Versi 7.10.6 rev34
open-xchange ox app suite Versi 7.10.6 rev35
open-xchange ox app suite Versi 7.10.6 rev36

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.