OX App Suite 7.8.4 and previous versions allows Information Exposure.
open-xchange open-xchange appsuite