Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37h6-wqp6-qg5g

Опубликовано: 14 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.

EPSS

Процентиль: 15%
0.00239
Низкий

7.1 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.1
ubuntu
3 месяца назад

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.

CVSS3: 7.1
nvd
3 месяца назад

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.

CVSS3: 7.1
debian
3 месяца назад

SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext ...

EPSS

Процентиль: 15%
0.00239
Низкий

7.1 High

CVSS3

Дефекты

CWE-89