OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. Read more