CVE-2023-29051
HIGHDescription
User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API. The existing switch to disable the feature by default was not effective in this case. Unauthorized users could discover and modify application state, including objects related to other users and contexts. We now make sure that the switch to disable user-generated templates by default works as intended and will remove the feature in future generations of the product. No publicly available exploits are known.
Is your site exposed to CVE-2023-29051?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
| open-xchange | ox_app_suite |
References
Other References
Frequently Asked Questions
What is CVE-2023-29051? +
How severe is CVE-2023-29051? +
What products are affected by CVE-2023-29051? +
How do I check if I'm vulnerable to CVE-2023-29051? +
Related Vulnerabilities
mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode …
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes …
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms …
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately …