CVE-2025-53603

In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body...

CVE-2025-53603

In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body...

CVE-2025-53603

In Alinto SOPE SOGo, versions 2.0.2–5.12.2 are affected by a NULL pointer dereference in sope-core/NGExtensions/NGHashMap.m that can crash SOGo when a query-string parameter duplicates a POST body parameter. Public advisories confirm fixes: Debian DSA-5970 and DLA-4260 for bookworm and bullseye, ...