CVE-2020-12643

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.

Date published : 2020-08-31

http://seclists.org/fulldisclosure/2020/Aug/14

https://www.open-xchange.com/