tocsin

Debian/sogo: unknown

SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract arbitrary data from the database by

Action: Upgrade sogo to 5.12.1-3+deb13u2 or later.

Affected

introducedfixedlast affected
05.12.1-3+deb13u2-

Fixed versions

5.12.1-3+deb13u2

Sources

published · modified · JSON