CVE-2023-24600 Information

Description

OX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls (for reading contacts) via a move to their own address book.

Reference

https://open-xchange.com http://seclists.org/fulldisclosure/2023/May/3