Browse / Open-Xchange

Open-Xchange

See its reports on the map

What gets reported to Open-Xchange

• Cross-site Scripting34
• Memory Corruption23
• Server-Side Request Forgery15
• Information Disclosure10
• Denial of Service8
• Access Control6

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Arbitrary local system file read on open-xchange server Resource Injection
   $2,000125 votes
2. Null pointer dereference in SMTP server function smtp_string_parseNULL Pointer Dereference
   $1,500105 votes
3. Blind XXE via Powerpoint filesXML External Entities (XXE)
   $2,00086 votes
4. Path Traversal in dict-fs and no-check Escape Character in oauth2-jwtPath Traversal
   $98257 votes
5. CSRF combined with IDOR within Document Converter exposes filesCross-Site Request Forgery (CSRF)
   $50052 votes
6. SSRF - Unchecked Snippet IDs for distributed filesServer-Side Request Forgery (SSRF)
   $1,50049 votes
7. SSRF in VCARD photo upload functionalityServer-Side Request Forgery (SSRF)
   $85049 votes
8. OX (Guard): Stored Cross-Site Scripting via Incoming EmailCross-site Scripting (XSS) - Generic
   $1,00048 votes
9. Memory corruption in imap-parser.cMemory Corruption - Generic
   $5,00046 votes
10. SSRF - Blacklist bypass for mail account additionServer-Side Request Forgery (SSRF)
    $50043 votes
11. SSRF - Image Sources in HTML Snippets - 727234 bypassServer-Side Request Forgery (SSRF)
    $40041 votes
12. [XSS] Style/Event Filter Bypass v3.0Cross-site Scripting (XSS) - Stored
    $50039 votes
13. SSRF - Office Documents - Image URLServer-Side Request Forgery (SSRF)
    $45037 votes
14. SSRF - URL Attachments - 725307 bypassServer-Side Request Forgery (SSRF)
    $40037 votes
15. Another window.opener issueOpen Redirect
    $90033 votes
16. Stored XSS Cross-site Scripting (XSS) - Stored
    $50033 votes
17. SSRF - RSS feed, blacklist bypass (301 re-direct)Server-Side Request Forgery (SSRF)
    $85033 votes
18. SSRF - RSS feed, blacklist bypass (IP Formatting)Server-Side Request Forgery (SSRF)
    $85032 votes
19. Use after free in smtp_server_connection_handle_commandUse After Free
    $50030 votes
20. Tab nabbing via window.openerOpen Redirect
    $66630 votes
21. Set Cookie Via SVGViolation of Secure Design Principles
    $25029 votes
22. Two heap use-after-free errors in IMAP operationsUse After Free
    $1,20026 votes
23. Username restriction bypass with SSL client authenticationImproper Authentication - Generic
    $1,00026 votes
24. IDOR - Downloading all attachements if having access to a shared linkInformation Disclosure
    $88826 votes
25. Panic: Input stream data unexpectedly has referencesDenial of Service
    $5021 votes
26. Command Injection via STARTTLS in SMTPCryptographic Issues - Generic
    $35020 votes
27. SSRF in /appsuite/api/autoconfig Server-Side Request Forgery (SSRF)
    $85020 votes
28. IDOR - Accessing other user's attachements via PUT /appsuite/api/files?action=saveAsInformation Disclosure
    $88820 votes
29. IDOR - Deleting other user's signature via /appsuite/api/snippet?action=update (although an error is thrown)Information Disclosure
    $30020 votes
30. XSS on opening a malicious OpenOffice text documentCross-site Scripting (XSS) - DOM
    $40018 votes
31. OX (Guard): Stored Cross-Site Scripting via Email AttachmentCross-site Scripting (XSS) - Generic
    $30017 votes
32. Dovecot authentication is vulnerable to timing attacks.Cryptographic Issues - Generic
    $60016 votes
33. XSS - Search - Unescaped contact jobCross-site Scripting (XSS) - Stored
    $45015 votes
34. Unchecked URL in attachment datasourceServer-Side Request Forgery (SSRF)
    $85015 votes
35. Another Stored XSS in mail app using Drive appCross-site Scripting (XSS) - Stored
    $50015 votes
36. [IDOR] Deleting other people's tasksImproper Access Control - Generic
    $30015 votes
37. IDOR - Folder names disclosure inside a domain, regardless of userInformation Disclosure
    $25015 votes
38. XSS - Notes - Attribute injection through overlapping tagsCross-site Scripting (XSS) - Stored
    $45014 votes
39. reading the stack data of the imap processBuffer Over-read
    $5014 votes
40. IDOR allow to extract all registered emailInsecure Direct Object Reference (IDOR)
    $30014 votes
41. IDOR - Leaking other user's folder names from /appsuite/api/import?action=ICAInformation Disclosure
    $30014 votes
42. Reflected Cross-Site Scripting due to vulnerable Flash component (Flashmediaelement.swf)Cross-site Scripting (XSS) - Generic
    $50014 votes
43. IDOR - setAttribute action of user object in APIInsecure Direct Object Reference (IDOR)
    $40013 votes
44. IDOR - Deleting other user's reminders just by idViolation of Secure Design Principles
    $30013 votes
45. SSRF protection bypass in /appsuite/api/oxodocumentfilter addfile actionServer-Side Request Forgery (SSRF)
    $55012 votes
46. store xss in calendar via upload filenameCross-site Scripting (XSS) - Stored
    $25012 votes
47. IDOR to view other user folder nameInsecure Direct Object Reference (IDOR)
    $25012 votes
48. OX Guard: DOM Based Cross-Site Scripting (#2)Cross-site Scripting (XSS) - Generic
    $50012 votes
49. Guard WKS lookup: Evil WKS server forces connections to last foreverDenial of Service
    $44411 votes
50. Pre-auth Denial-of-Service in Dovecot RPA implementationDenial of Service
    $55011 votes
51. access to stack memory beyond array boundariesMemory Corruption - Generic
    $40011 votes
52. Stored XSS in mail appCross-site Scripting (XSS) - Stored
    $50011 votes
53. No session expiry after log-out and session id exposed in URLInsufficient Session Expiration
    $30011 votes
54. [XSS] RSS Feed WidgetCross-site Scripting (XSS) - Stored
    $50011 votes
55. Blind SSRF in /appsuite/api/oxodocumentfilter&action=addfileServer-Side Request Forgery (SSRF)
    $55010 votes
56. [SSRF] PDF documentconverterwsServer-Side Request Forgery (SSRF)
    $85010 votes
57. [XSS/CSRF] filter content-type bypass in FilesCross-site Scripting (XSS) - Stored
    $75010 votes
58. A malicious user can upload a malicious script through managesieve and trigger its execution in order to consume almost 100% of CPU (LMTP).Denial of Service
    $3009 votes
59. Buffer over read from `smtp_command_parse_parameters`Buffer Over-read
    $509 votes
60. XSS on opening malicious OpenOffice presentation documentCross-site Scripting (XSS) - DOM
    $4009 votes
61. Buffer over-reads in i_stream_zlib_readBuffer Over-read
    $509 votes
62. Stored XSS in Template DocumentsCross-site Scripting (XSS) - Generic
    $3009 votes
63. XSS - Calendar - Unescaped common name of appointment participantCross-site Scripting (XSS) - Generic
    $4508 votes
64. RTLO character in file namesUI Redressing (Clickjacking)
    $2508 votes
65. Incomplete HTML sanitization + Session id leaking + private information disclosureInformation Disclosure
    $2008 votes
66. Selecting encryption for email with drive attachment overrides the drive email passwordInformation Disclosure
    $1008 votes
67. OX Guard: DOM Based Cross-Site ScriptingCross-site Scripting (XSS) - Generic
    $5008 votes
68. XSS on opening malicious OpenOffice presentation documentCross-site Scripting (XSS) - DOM
    $4007 votes
69. XSS - Guard - Insufficient escaping of User-IDs from PGP KeysCross-site Scripting (XSS) - DOM
    $5007 votes
70. Stored XSS in Email attachment file nameCross-site Scripting (XSS) - Stored
    $5007 votes
71. Privilege escalation possible in dovecot when similar passdbs are usedImproper Access Control - Generic
    $9006 votes
72. Panic in file smtp-address.c: line 684 (smtp_address_write): assertion failed: (smtp_char_is_qpair(*p))Denial of Service
    $506 votes
73. Buffer overflow in sha3Classic Buffer Overflow
    6 votes
74. [XSS] Style/Event Filter Bypass v4.0Cross-site Scripting (XSS) - Stored
    $5006 votes
75. Stored-XSS with user interaction on [sandbox.open-xchange.com] via inserted link in mailCross-site Scripting (XSS) - Stored
    $5006 votes
76. Adding external participants to unaccessible appointmentsImproper Access Control - Generic
    $3006 votes
77. A specially crafted message sent to the local delivery agent (LMTP) causes the LMTP child process to issue a panic (call i_panic)Denial of Service
    $4505 votes
78. Incomplete fix for CVE-2020-12673 : Specially crafted NTML message leads to buffer over readBuffer Over-read
    $4005 votes
79. Out of memory with combination of `test_config_set` and `test_config_reload`Denial of Service
    $505 votes
80. Null pointer deference in call to `mail_get_flags`NULL Pointer Dereference
    $505 votes
81. null dereference in `sieve_address_do_validate` (or redundant null check)NULL Pointer Dereference
    $505 votes
82. Pre-auth buffer over-read in Dovecot NTLM implementationBuffer Over-read
    $5505 votes
83. Recursor accepts unsigned, empty NXDOMAINs in secure zonesImproper Authentication - Generic
    $4005 votes
84. Information About Your System(Sensitive Directories)Information Disclosure
    5 votes
85. nginx server vulnerableUI Redressing (Clickjacking)
    5 votes
86. SSRF - Guard - Unchecked WKS serversServer-Side Request Forgery (SSRF)
    $4004 votes
87. SSRF - Guard - Unchecked HKP serversServer-Side Request Forgery (SSRF)
    $4004 votes
88. command Injection in rawlog binaryCommand Injection - Generic
    4 votes
89. [XSS] Mail <style> v2.0Cross-site Scripting (XSS) - Stored
    $5004 votes
90. Unauthorized access to attachments details of Private Calendar appointments (Access control issue)Improper Access Control - Generic
    $2004 votes
91. Directory listing
    4 votes
92. Null pointer dereference in lib-sieve after calling sieve_binary_block_indexNULL Pointer Dereference
    3 votes
93. Some build dependencies are downloaded over an insecure channel (without subsequent integrity checks)Cryptographic Issues - Generic
    3 votes
94. Null dereference or redundant null check in `mail_crypt_load_global_private_key` for plugin mail-cryptNULL Pointer Dereference
    $503 votes
95. Null pointer dereference in SMTP server function smtp_command_parse_data_with_sizeNULL Pointer Dereference
    $503 votes
96. [XSS] content_disposition=inline in filesCross-site Scripting (XSS) - Stored
    $5003 votes
97. [XSS] Parameter Theme Cross-site Scripting (XSS) - Reflected
    $3003 votes
98. [XSS] Forgot password linkCross-site Scripting (XSS) - Reflected
    $3003 votes
99. [XSS] select/onchange in TinyMCE via set bodyCross-site Scripting (XSS) - Stored
    $3003 votes
100. [XSS/CSRF] filter content-type bypass in Files v2.0Cross-site Scripting (XSS) - Stored
     $5003 votes