Описание
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | needs-triage | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected |
Показывать по
Ссылки на источники
EPSS
4 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows ...
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.
ALT-PU-2018-3699: package `sogo` update to version 3.2.10.20171010-alt3
EPSS
4 Medium
CVSS2
4.3 Medium
CVSS3