CVE-2023-24599

open-xchange ox app suite

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-24599

Katalog CVE

CVSS 4.3 · Medium EPSS 0,50%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada open-xchange ox app suite. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion."

Rincian

Terbit di NVD
29 Mei 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
EPSS (30 hari)
0,50% peluang dieksploitasi; lebih tinggi dari 41,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
open-xchange ox app suite Semua versi sebelum 7.10.6
open-xchange ox app suite Versi 7.10.6
open-xchange ox app suite Versi 7.10.6 rev01
open-xchange ox app suite Versi 7.10.6 rev02
open-xchange ox app suite Versi 7.10.6 rev03
open-xchange ox app suite Versi 7.10.6 rev04
open-xchange ox app suite Versi 7.10.6 rev05
open-xchange ox app suite Versi 7.10.6 rev06
open-xchange ox app suite Versi 7.10.6 rev07
open-xchange ox app suite Versi 7.10.6 rev08
open-xchange ox app suite Versi 7.10.6 rev09
open-xchange ox app suite Versi 7.10.6 rev10
open-xchange ox app suite Versi 7.10.6 rev11
open-xchange ox app suite Versi 7.10.6 rev12
open-xchange ox app suite Versi 7.10.6 rev13
open-xchange ox app suite Versi 7.10.6 rev14
open-xchange ox app suite Versi 7.10.6 rev15
open-xchange ox app suite Versi 7.10.6 rev16
open-xchange ox app suite Versi 7.10.6 rev17
open-xchange ox app suite Versi 7.10.6 rev18
open-xchange ox app suite Versi 7.10.6 rev19
open-xchange ox app suite Versi 7.10.6 rev20
open-xchange ox app suite Versi 7.10.6 rev21
open-xchange ox app suite Versi 7.10.6 rev22
open-xchange ox app suite Versi 7.10.6 rev23
open-xchange ox app suite Versi 7.10.6 rev24
open-xchange ox app suite Versi 7.10.6 rev25
open-xchange ox app suite Versi 7.10.6 rev26
open-xchange ox app suite Versi 7.10.6 rev27
open-xchange ox app suite Versi 7.10.6 rev28
open-xchange ox app suite Versi 7.10.6 rev29
open-xchange ox app suite Versi 7.10.6 rev30
open-xchange ox app suite Versi 7.10.6 rev31
open-xchange ox app suite Versi 7.10.6 rev32
open-xchange ox app suite Versi 7.10.6 rev33
open-xchange ox app suite Versi 7.10.6 rev34
open-xchange ox app suite Versi 7.10.6 rev35
open-xchange ox app suite Versi 7.10.6 rev36

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.