A vulnerability, which was classified as problematic, was found in Open-Xchange Server 6.20.7/6.22.0/6.22.1. Affected is an unknown function of the component Gopher. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on integrity. CVE summarizes:

The Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not properly validate the publication-source URL, which allows remote authenticated users to trigger arbitrary outbound TCP traffic via a crafted Source field, as demonstrated by (1) an ftp: URL, (2) a gopher: URL, or (3) an http://127.0.0.1/ URL, related to a "Server-side request forging (SSRF)" issue.

The weakness was presented 09/05/2013 as not defined posting (Bugtraq). The advisory is shared for download at archives.neohapsis.com. This vulnerability is traded as CVE-2013-1648 since 02/11/2013. It is possible to launch the attack remotely. The successful exploitation requires a authentication. Technical details are unknown but a public exploit is available.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 6.22.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Exploit-DB (24791). See 64851, 64850, 64849 and 64847 for similar entries.

Productinfo

Vendor

• Open-Xchange

Name

• Server

Version

• 6.20.7
• 6.22.0
• 6.22.1

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion