OX App Suite through 7.10.3 allows SSRF.
Weakness
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Open-xchange_appsuite | Open-xchange | 7.8.4 (including) | 7.8.4 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev1 (including) | 7.8.4-rev1 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev10 (including) | 7.8.4-rev10 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev11 (including) | 7.8.4-rev11 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev12 (including) | 7.8.4-rev12 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev13 (including) | 7.8.4-rev13 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev14 (including) | 7.8.4-rev14 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev15 (including) | 7.8.4-rev15 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev16 (including) | 7.8.4-rev16 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev17 (including) | 7.8.4-rev17 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev18 (including) | 7.8.4-rev18 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev19 (including) | 7.8.4-rev19 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev2 (including) | 7.8.4-rev2 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev20 (including) | 7.8.4-rev20 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev21 (including) | 7.8.4-rev21 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev22 (including) | 7.8.4-rev22 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev23 (including) | 7.8.4-rev23 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev24 (including) | 7.8.4-rev24 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev25 (including) | 7.8.4-rev25 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev26 (including) | 7.8.4-rev26 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev27 (including) | 7.8.4-rev27 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev28 (including) | 7.8.4-rev28 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev29 (including) | 7.8.4-rev29 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev3 (including) | 7.8.4-rev3 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev30 (including) | 7.8.4-rev30 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev31 (including) | 7.8.4-rev31 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev32 (including) | 7.8.4-rev32 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev33 (including) | 7.8.4-rev33 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev34 (including) | 7.8.4-rev34 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev35 (including) | 7.8.4-rev35 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev36 (including) | 7.8.4-rev36 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev37 (including) | 7.8.4-rev37 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev38 (including) | 7.8.4-rev38 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev39 (including) | 7.8.4-rev39 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev4 (including) | 7.8.4-rev4 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev40 (including) | 7.8.4-rev40 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev41 (including) | 7.8.4-rev41 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev42 (including) | 7.8.4-rev42 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev43 (including) | 7.8.4-rev43 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev44 (including) | 7.8.4-rev44 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev45 (including) | 7.8.4-rev45 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev46 (including) | 7.8.4-rev46 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev47 (including) | 7.8.4-rev47 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev48 (including) | 7.8.4-rev48 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev49 (including) | 7.8.4-rev49 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev5 (including) | 7.8.4-rev5 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev50 (including) | 7.8.4-rev50 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev51 (including) | 7.8.4-rev51 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev52 (including) | 7.8.4-rev52 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev53 (including) | 7.8.4-rev53 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev54 (including) | 7.8.4-rev54 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev55 (including) | 7.8.4-rev55 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev56 (including) | 7.8.4-rev56 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev57 (including) | 7.8.4-rev57 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev58 (including) | 7.8.4-rev58 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev59 (including) | 7.8.4-rev59 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev6 (including) | 7.8.4-rev6 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev60 (including) | 7.8.4-rev60 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev61 (including) | 7.8.4-rev61 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev62 (including) | 7.8.4-rev62 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev63 (including) | 7.8.4-rev63 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev64 (including) | 7.8.4-rev64 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev65 (including) | 7.8.4-rev65 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev66 (including) | 7.8.4-rev66 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev67 (including) | 7.8.4-rev67 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev7 (including) | 7.8.4-rev7 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev8 (including) | 7.8.4-rev8 (including) |
| Open-xchange_appsuite | Open-xchange | 7.8.4-rev9 (including) | 7.8.4-rev9 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1 (including) | 7.10.1 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev1 (including) | 7.10.1-rev1 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev10 (including) | 7.10.1-rev10 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev11 (including) | 7.10.1-rev11 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev12 (including) | 7.10.1-rev12 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev13 (including) | 7.10.1-rev13 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev14 (including) | 7.10.1-rev14 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev15 (including) | 7.10.1-rev15 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev16 (including) | 7.10.1-rev16 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev17 (including) | 7.10.1-rev17 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev18 (including) | 7.10.1-rev18 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev19 (including) | 7.10.1-rev19 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev2 (including) | 7.10.1-rev2 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev20 (including) | 7.10.1-rev20 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev21 (including) | 7.10.1-rev21 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev22 (including) | 7.10.1-rev22 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev23 (including) | 7.10.1-rev23 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev24 (including) | 7.10.1-rev24 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev25 (including) | 7.10.1-rev25 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev26 (including) | 7.10.1-rev26 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev27 (including) | 7.10.1-rev27 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev3 (including) | 7.10.1-rev3 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev4 (including) | 7.10.1-rev4 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev5 (including) | 7.10.1-rev5 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev6 (including) | 7.10.1-rev6 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev7 (including) | 7.10.1-rev7 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev8 (including) | 7.10.1-rev8 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.1-rev9 (including) | 7.10.1-rev9 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2 (including) | 7.10.2 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev1 (including) | 7.10.2-rev1 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev10 (including) | 7.10.2-rev10 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev11 (including) | 7.10.2-rev11 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev12 (including) | 7.10.2-rev12 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev13 (including) | 7.10.2-rev13 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev14 (including) | 7.10.2-rev14 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev15 (including) | 7.10.2-rev15 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev16 (including) | 7.10.2-rev16 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev17 (including) | 7.10.2-rev17 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev18 (including) | 7.10.2-rev18 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev19 (including) | 7.10.2-rev19 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev2 (including) | 7.10.2-rev2 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev20 (including) | 7.10.2-rev20 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev21 (including) | 7.10.2-rev21 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev3 (including) | 7.10.2-rev3 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev4 (including) | 7.10.2-rev4 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev5 (including) | 7.10.2-rev5 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev6 (including) | 7.10.2-rev6 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev7 (including) | 7.10.2-rev7 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev8 (including) | 7.10.2-rev8 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.2-rev9 (including) | 7.10.2-rev9 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3 (including) | 7.10.3 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev1 (including) | 7.10.3-rev1 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev2 (including) | 7.10.3-rev2 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev3 (including) | 7.10.3-rev3 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev4 (including) | 7.10.3-rev4 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev5 (including) | 7.10.3-rev5 (including) |
| Open-xchange_appsuite | Open-xchange | 7.10.3-rev6 (including) | 7.10.3-rev6 (including) |