Medium severity · published Jun 20, 2023
CVE-2023-26428
Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context
6.5
CVSS
1%
EPSS
No
On KEV
Description
Attackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other users within the same context. Signatures of other users could be read even though they are not explicitly shared. We improved permission handling when requesting snippets that are not explicitly shared with other users. No publicly available exploits are known.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Open-xchange Appsuite Backend · Open-xchange
before 7.10.6; 8.0.0 before 8.11.0; 7.10.6; 7.10.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-26428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-26428
Third Party Advisory
http://packetstormsecurity.com/files/173083/OX-App-Suite-SSRF-Resource-Consumption-Command-Injection.html
Mailing List
http://seclists.org/fulldisclosure/2023/Jun/8
documentation.open-xchange.com
https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0002.json
Release Notes
https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6219_7.10.6_2023-03-20.pdf
More from Open-xchange Appsuite Backend
9.8
CVE-2023-26443
Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements
8.8
CVE-2023-26436
Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization
7.5
CVE-2023-26451
Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service
6.1
CVE-2016-6846
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8; AppSuite frontend before…
5.3
CVE-2023-26429
Control characters were not removed when exporting user feedback content