CVE-2023-24600

Publication date

2023-05-29 00:00:00

Family

mitre

State

PUBLISHED

Description

OX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for reading contacts) via a move to their own address book.