Описание
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
Ссылки
- Mailing ListVDB Entry
- Patch
- Patch
- ExploitVendor Advisory
- Mailing ListVDB Entry
- Patch
- Patch
- ExploitVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
Связанные уязвимости
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows ...
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
ALT-PU-2018-3699: package `sogo` update to version 3.2.10.20171010-alt3
EPSS
4.3 Medium
CVSS3
4 Medium
CVSS2