CVE-2023-41706

Processing time of drive search expressions now gets monitored, and the related request is terminated if a resource threshold is reached. Availability of OX App Suite could be reduced due to high processing load. Please deploy the provided updates and patch releases. Processing of user-defined drive search expressions is not limited No publicly available exploits are known.

• CWE-400

• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.jsonVendor Advisory
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdfRelease Notes
• http://seclists.org/fulldisclosure/2024/Feb/10
• https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0007.jsonVendor Advisory
• https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6259_7.10.6_2023-12-11.pdfRelease Notes

Published

Feb 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41697Cross-Site Request Forgery (CSRF) vulnerability in Nikunj So…8.8
• CVE-2023-41699URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2023-4170A vulnerability was found in DedeBIZ 6.2.10. It has been rat…4.8
• CVE-2023-41703User ID references at mentions in document comments were not…6.1
• CVE-2023-41704Processing of CID references at E-Mail can be abused to inje…6.1
• CVE-2023-41705Processing of user-defined DAV user-agent strings is not lim…6.5
• CVE-2023-41707Processing of user-defined mail search expressions is not li…6.5
• CVE-2023-41708References to the "app loader" functionality could contain r…5.4
• CVE-2023-4171A vulnerability classified as problematic was found in Cheng…5.3
• CVE-2023-41710User-defined script code could be stored for a upsell relate…5.4
• CVE-2023-41711SonicOS post-authentication Stack-Based Buffer Overflow Vuln…6.5
• CVE-2023-41712SonicOS post-authentication Stack-Based Buffer Overflow Vuln…6.5