CVE-2023-24604 Information

Description

OX App Suite before backend 7.10.6-rev37 does not check HTTP header lengths when downloading e.g. potentially allowing a crafted iCal feed to provide an unlimited amount of header data.

Reference

https://open-xchange.com http://seclists.org/fulldisclosure/2023/May/3