Unrated
OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list.
CVE-2022-43698
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web open-xchange.com
- web seclists.org