Low severity3.5NVD Advisory· Published Jun 20, 2023· Updated Jun 17, 2026
CVE-2023-26429
CVE-2023-26429
Description
Control characters were not removed when exporting user feedback content. This allowed attackers to include unexpected content via user feedback and potentially break the exported data structure. We now drop all control characters that are not whitespace character during the export. No publicly available exploits are known.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:open-xchange:open-xchange_appsuite_backend:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:open-xchange:open-xchange_appsuite_backend:*:*:*:*:*:*:*:*range: <7.10.6
- cpe:2.3:a:open-xchange:open-xchange_appsuite_backend:7.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:open-xchange:open-xchange_appsuite_backend:7.10.6:revision_39:*:*:*:*:*:*
- Range: 0
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/173083/OX-App-Suite-SSRF-Resource-Consumption-Command-Injection.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2023/Jun/8nvdMailing ListThird Party Advisory
- software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_6219_7.10.6_2023-03-20.pdfnvdRelease Notes
- documentation.open-xchange.com/appsuite/security/advisories/csaf/2023/oxas-adv-2023-0002.jsonnvd
News mentions
0No linked articles in our index yet.