by Kastro
Paper/Archive/CVE-2023-29050

CVE-2023-29050

Open-Xchange GmbH OX App Suite — The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outs…

EPSS 2%CVSS 9.6
critical.is priorityof 100
44
CVSS 9.6 (NVD)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 76.8.768 × 2015.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hierarchy. Unauthorized users could break confidentiality of information in the directory and potentially cause high load on the directory server, leading to denial of service. Encoding has been added for user-provided fragments that are used when constructing the LDAP query. No publicly available exploits are known.

Affected

ProductAffectedFixed inSource
OX App Suite≤ 7.10.6-rev50–CNA
OX App Suite≤ 8.16–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
OX (CNA)7.6CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsoftware.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6248_7.10.6_2023-09-19.pdfadvisorydocumentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0005.jsonrefseclists.org/fulldisclosure/2024/Jan/3refpacketstormsecurity.com/files/176421/OX-App-Suite-7.10.6-XSS-Command-Execution-LDAP-Injection.html