OX App Suite 7.8.4 and previous versions allows Server-Side Request Forgery.
open-xchange open-xchange appsuite