Open-Xchange OX App Suite prior to 7.6.3-rev37, 7.8.x prior to 7.8.2-rev40, 7.8.3 prior to 7.8.3-rev48, and 7.8.4 prior to 7.8.4-rev28 include folder names in API error responses, which allows remote malicious users to obtain sensitive information via the folder parameter in an "all" action to api/tasks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
open-xchange open-xchange appsuite 7.6.3 |
||
open-xchange open-xchange appsuite 7.8.0 |
||
open-xchange open-xchange appsuite 7.8.3 |
||
open-xchange open-xchange appsuite 7.8.4 |
||
open-xchange open-xchange appsuite |
||
open-xchange open-xchange appsuite 7.8.2 |
Vulmon