CVE:CVE-2022-37313
CNNVD:CNNVD-202211-3715
Open-Xchange OX App Suite是德国Open-Xchange公司的一个电子邮件及生产力套件客户端软件。
Open-Xchange OX App Suite 7.10.6及之前版本存在安全漏洞，该漏洞源于使用具有多个A或AAAA响应的恶意DNS记录可以绕过有关外部连接的拒绝列表，服务器发起的对外部资源的请求可以定向到基于拒绝列表设置限制的内部资源，这可用于确定内部地址和服务，存在违反基于边界的安全策略的风险。
solution:Upgrade open-xchange open-xchange_appsuite to a higher version than 7.10.5,7.10.5,7.10.5:patch_release_5961,7.10.5:patch_release_5973,7.10.5:patch_release_5976,7.10.5:patch_release_5982,7.10.5:patch_release_5989,7.10.5:patch_release_5994,7.10.5:patch_release_6000,7.10.5:patch_release_6003,7.10.5:patch_release_6008,7.10.5:patch_release_6010,7.10.5:patch_release_6016,7.10.5:patch_release_6020,7.10.5:patch_release_6026,7.10.5:patch_release_6029,7.10.5:patch_release_6034,7.10.5:patch_release_6035,7.10.5:patch_release_6038,7.10.5:patch_release_6046,7.10.5:patch_release_6051,7.10.5:patch_release_6053,7.10.5:patch_release_6060,7.10.5:patch_release_6061,7.10.5:patch_release_6066,7.10.5:patch_release_6068,7.10.5:patch_release_6072,7.10.5:patch_release_6079,7.10.5:patch_release_6084,7.10.5:patch_release_6092,7.10.5:patch_release_6101,7.10.5:patch_release_6111,7.10.5:patch_release_6120,7.10.5:patch_release_6132,7.10.5:patch_release_6137,7.10.5:patch_release_6140,7.10.5:patch_release_6149,7.10.6,7.10.6:patch_release_6069,7.10.6:patch_release_6073,7.10.6:patch_release_6080,7.10.6:patch_release_6085,7.10.6:patch_release_6093,7.10.6:patch_release_6102,7.10.6:patch_release_6112,7.10.6:patch_release_6121,7.10.6:patch_release_6133,7.10.6:patch_release_6138,7.10.6:patch_release_6141,7.10.6:patch_release_6146,7.10.6:patch_release_6147,7.10.6:patch_release_6148,7.10.6:patch_release_6150,and avoid the version (,7.10.5),7.10.5,7.10.5:patch_release_5961,7.10.5:patch_release_5973,7.10.5:patch_release_5976,7.10.5:patch_release_5982,7.10.5:patch_release_5989,7.10.5:patch_release_5994,7.10.5:patch_release_6000,7.10.5:patch_release_6003,7.10.5:patch_release_6008,7.10.5:patch_release_6010,7.10.5:patch_release_6016,7.10.5:patch_release_6020,7.10.5:patch_release_6026,7.10.5:patch_release_6029,7.10.5:patch_release_6034,7.10.5:patch_release_6035,7.10.5:patch_release_6038,7.10.5:patch_release_6046,7.10.5:patch_release_6051,7.10.5:patch_release_6053,7.10.5:patch_release_6060,7.10.5:patch_release_6061,7.10.5:patch_release_6066,7.10.5:patch_release_6068,7.10.5:patch_release_6072,7.10.5:patch_release_6079,7.10.5:patch_release_6084,7.10.5:patch_release_6092,7.10.5:patch_release_6101,7.10.5:patch_release_6111,7.10.5:patch_release_6120,7.10.5:patch_release_6132,7.10.5:patch_release_6137,7.10.5:patch_release_6140,7.10.5:patch_release_6149,7.10.6,7.10.6:patch_release_6069,7.10.6:patch_release_6073,7.10.6:patch_release_6080,7.10.6:patch_release_6085,7.10.6:patch_release_6093,7.10.6:patch_release_6102,7.10.6:patch_release_6112,7.10.6:patch_release_6121,7.10.6:patch_release_6133,7.10.6:patch_release_6138,7.10.6:patch_release_6141,7.10.6:patch_release_6146,7.10.6:patch_release_6147,7.10.6:patch_release_6148,7.10.6:patch_release_6150