CVE-2023-26443

Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitization in place, this can be abused to trigger benign SQL Exceptions but could potentially be escalated to a malicious SQL injection vulnerability. We now properly encode single quotes for SQL FULLTEXT queries. No publicly available exploits are known.

• CWE-89
• CWE-89

• http://packetstormsecurity.com/files/173943/OX-App-Suite-SSRF-SQL-Injection-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Aug/8Mailing List, Third Party Advisory
• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0003.json
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6230_7.10.6_2023-05-02.pdfRelease Notes
• http://packetstormsecurity.com/files/173943/OX-App-Suite-SSRF-SQL-Injection-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Aug/8Mailing List, Third Party Advisory
• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0003.json
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6230_7.10.6_2023-05-02.pdfRelease Notes

Published

Aug 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26438External service lookups for a number of protocols were vuln…3.1
• CVE-2023-26439The cacheservice API could be abused to inject parameters wi…7.8
• CVE-2023-2644A vulnerability, which was classified as problematic, has be…7.8
• CVE-2023-26440The cacheservice API could be abused to indirectly inject pa…7.8
• CVE-2023-26441Cacheservice did not correctly check if relative cache objec…5.5
• CVE-2023-26442In case Cacheservice was configured to use a sproxyd object-…3.2
• CVE-2023-26445Frontend themes are defined by user-controllable jslob setti…5.4
• CVE-2023-26446The users clientID at "application passwords" was not saniti…5.4
• CVE-2023-26447The "upsell" widget for the portal allows to specify a produ…5.4
• CVE-2023-26448Custom log-in and log-out locations are used-defined as jslo…5.4
• CVE-2023-26449The "OX Chat" web service did not specify a media-type when …5.4
• CVE-2023-2645A vulnerability, which was classified as critical, was found…9.8