Vulnerability Details CVE-2023-24598
OX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lists, e.g., partial disclosure of the private contacts of another user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.3%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2023-24598
-
cpe:2.3:a:open-xchange:ox_app_suite:-
-
cpe:2.3:a:open-xchange:ox_app_suite:7.10.5
-
cpe:2.3:a:open-xchange:ox_app_suite:7.10.6