PT-2022-23919 · Open Xchange · Ox App Suite

Published 2022-12-26 · Updated 2023-08-08 · CVE-2022-37311

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.6 and earlier

Description The issue is related to Uncontrolled Resource Consumption. This occurs when a large location request parameter is sent to the redirect servlet, potentially causing the system to consume excessive resources.

Recommendations For OX App Suite versions 7.10.6 and earlier, consider restricting access to the redirect servlet to minimize the risk of exploitation until a patch is available. Avoid using large location request parameters in the redirect servlet to prevent Uncontrolled Resource Consumption. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2022-37311

Affected Products

Ox App Suite

References · 5

• 🔥 https://seclists.org/fulldisclosure/2022/Nov/18 · Exploit
• https://open-xchange.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37311 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37311 · Vendor Advisory
• https://t.me/cibsecurity/55326 · Telegram Post