CVE-2022-26562

CVE-2022-26562 describes an authentication bypass in Kopano Core = 6.30 (provider/libserver/ECPamAuth.cpp), allowing login even when the user password or account is expired. The connected documents confirm the affected components and root cause (expired-password-based auth bypass) but do not prov...

CVE-2019-19907

CVE-2019-19907 affects Kopano Groupware Core (Kopano Core) before 8.7.7. The vulnerability arises in HrAddFBBlock implemented in libfreebusy/freebusyutil.cpp, where an array copy during ICal data parsing can cause out-of-bounds access. Descriptions from NVD document a CVSS v3.1 base score of 9.8 ...

CVE-2021-28994

CVE-2021-28994 affects Kopano Groupware Core via kopano-ical (formerly zarafa-ical). The vulnerability causes memory exhaustion by processing long HTTP headers. Affected versions include Kopano Groupware Core up to 8.7.16, 9.x up to 9.1.0, 10.x up to 10.0.7, and 11.x up to 11.0.1, and Zarafa 6.30...