CVE-2023-24604

Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.6-rev37

Description The issue concerns the lack of HTTP header length checks when downloading data, such as iCal feeds. This could potentially allow a crafted feed to provide an excessive amount of header data.

Recommendations For OX App Suite versions prior to 7.10.6-rev37, update to version 7.10.6-rev37 or later to resolve the issue. As a temporary workaround, consider restricting the download of iCal feeds or limiting the amount of header data that can be processed until a patch is available.