Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-5753 — Improper Input Validation in Appsuite

CWE-20 — Improper Input ValidationCWE-200 — Sensitive Information Exposure12 documents9 sources
Severity
6.5MEDIUMNVD
EPSS
1.7%
top 17.42%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Open-xchange Appsuite
Timeline
PublishedJun 16
Latest updateMay 14

Description

The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev20 allows remote attackers to spoof the origin of e-mails via unicode characters in the "personal part" of a (1) From or (2) Sender address.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8rfv-4356-35qw: The frontend component in Open-Xchange OX App Suite before 7↗2022-05-14
▶
CVEList
CVE-2018-5753: The frontend component in Open-Xchange OX App Suite before 7↗2018-06-15
▶

💥Exploits & PoCs

2
Exploit-DB
OX App Suite 7.8.4 - Multiple Vulnerabilities↗2018-06-12
▶
Exploit-DB
Multiple CPUs - 'Spectre' Information Disclosure↗2018-01-03
▶

📋Vendor Advisories

1
Cisco
CPU Side-Channel Information Disclosure Vulnerabilities↗2018-01-05
▶

🕵️Threat Intelligence

2
Qualys
Processor Vulnerabilities - Meltdown and Spectre | Qualys↗2018-01-04
▶
Sentinelone
SentinelOne is Compatible with “Meltdown” and “Spectre” Fixes↗2018-01-04
▶

💬Community

1
Bugzilla
firefox: mitigations against spectre via javascript↗2018-01-08
▶
CVE-2018-5753 — Improper Input Validation in Appsuite | cvebase