CVE-2023-24600
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published May 29, 2023
Updated: Jan 14, 2025
CWE ID 863
Summary
CVE-2023-24600 is a vulnerability affecting the OX App Suite backend before version 7.10.6-rev37. This issue enables authenticated users to bypass access controls and gain unauthorized access to contacts in their own address book. The vulnerability allows users to move contacts, effectively bypassing intended access restrictions, posing a significant risk to privacy and confidentiality. This issue should be addressed promptly by updating to the latest version of the OX App Suite backend to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- OX App Suite
Affected Vendors
- Open-xchange