CVE-2025-63498

Description

References

• Alinto/sogo commit 9e20190 · Patch
• Alinto/sogo release SOGo-5.12.4 · Release Notes
• xryptoh/CVE-2025-63498 · Exploit
• lists.debian.org/debian-lts-announce/2025/11/msg00029.html · Mailing List

Weitere Schwachstellen in sogo

• CVE-2026-33550NIEDRIG 2.6SOGo before 5.12.5 does not renew the OTP if a user disables/enables it, and has a too short length (only 12 digits instead of the 20 recomm…
• CVE-2025-71276MITTEL 6.1SOGo before 5.12.5 is prone to a XSS vulnerability with events, tasks, and contacts categories.
• CVE-2026-3054MITTEL 6.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the argument hint leads t…
• CVE-2025-63499MITTEL 6.1Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
• CVE-2024-24510MITTEL 6.1Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function t…