OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
open-xchange ox app suite 7.10.6 |
||
open-xchange ox app suite |