CVE-2020-24700 – OX App Suite through 7.10.3 allows SSRF because GET requests are sent to

OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24700

Reference (s):

• FULLDISC:20210716 Open-Xchange Security Advisory 2021-07-15
• URL: http://seclists.org/fulldisclosure/2021/Jul/33
• http://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html
• http://packetstormsecurity.com/files/163527/OX-App-Suite-OX-Guard-OX-Documents-SSRF-Cross-Site-Scripting.html
• https://www.open-xchange.com