Vulnerabilities > CVE-2018-12609 - Server-Side Request Forgery (SSRF) vulnerability in Open-Xchange Appsuite

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
open-xchange
CWE-918

Summary

OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery.

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/151034/oxappsuite784783-xssxsrfdisclose.txt
idPACKETSTORM:151034
last seen2019-01-08
published2019-01-07
reporterSecator
sourcehttps://packetstormsecurity.com/files/151034/Ox-App-Suite-7.8.4-7.8.3-XSS-CSRF-Information-Disclosure.html
titleOx App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure