Processing Time of DAV User-Agents Now Monitored and Requests Terminated if Threshold Reached

CVE-2023-41705

What is CVE-2023-41705?

The vulnerability arises from the improper processing of user-defined DAV user-agent strings, which, if exploited, can lead to a substantial processing load that may degrade the availability of the OX App Suite. As a protective measure, the product has been updated to monitor the processing time of these user-agents. If specific resource thresholds are breached, the related requests are automatically terminated to mitigate the impact. No publicly disclosed exploits exist for this vulnerability, but it is crucial for users to implement available updates and patch releases to ensure uninterrupted service.

References