SOGo_web_mail-vulnerability-CVE-2025-50340

CVE-2025-50340: SOGo Webmail의 안전하지 않은 직접 객체 참조IDOR 취약점 CVE ID: CVE-2025-50340 Reporter: Milad Seddigh Product: SOGo Affected Versions: v5.6.0 Impact: 안전하지 않은 직접 객체 참조IDOR 취약점 → 사용자가 다른 사용자를 대신하여 이메일을 보낼 수 있음. 요약 SOGo Webmail에서 안전하지 않은 직접 객체 참조IDOR 취약점이 발견되었습니다. 이 취약점으로 인해 인증된 사용자가 이메일 전송 요청에 포함된...

CVE-2022-4556

CVE-2022-4556 - SOGo Webmail의 저장형 XSS v5.7.1 🧠 요약 SOGo 웹 인터페이스 의 신원 기본 설정Identity Preferences 섹션에 있는 fullName 필드에서 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었으며, 버전 5.7.1 에 영향을 미칩니다. 인증된 공격자는 악성 스크립트를 주입할 수 있으며, 해당 스크립트는 공격자를 포함한 모든 사용자가 메일 탭에 접근할 때마다 실행됩니다. 🆔 CVE 세부 정보 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 중...

EUVD-2025-23544

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-50340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of oth...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

Exploit for Improper Neutralization in Alinto Sogo

CVE-2022-4556 - Stored XSS in SOGo Webmail v5.7.1 🧠 Summ...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

UBUNTU-CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

CVE-2025-50340: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

SOGo Webmail 安全漏洞

SOGo Webmail is a SOGo open source webmail and collaboration system. A security vulnerability exists in SOGo Webmail 5.6.0 and earlier versions, which stems from an insecure direct object reference that could lead to an authenticated user impersonating another user to send mail...

CVE-2025-50340

An Insecure Direct Object Reference (IDOR) vulnerability exists in SOGo Webmail versions through 5.6.0 . The root cause is a failure to verify if an authenticated user is authorized to use a specified sender identity when a user-controlled identifier is manipulated in the email-sending request. T...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

PT-2025-31860 · Unknown +1 · Sogo Web Mail +1

Name of the Vulnerable Software and Affected Versions: SOGo Webmail versions through 5.6.0 Description: An Insecure Direct Object Reference IDOR vulnerability allows an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending...

CVE-2025-50340

Removed by vendor...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...