tocsin

Debian/sogo: unknown

SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by

Action: Upgrade sogo to 5.8.0-2+deb12u3 or later.

Affected

introducedfixedlast affected
05.8.0-2+deb12u3-

Fixed versions

5.8.0-2+deb12u3

Sources

published · modified · JSON