OX App Suite prior to 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list.
open-xchange ox app suite 7.10.6
open-xchange ox app suite