CVE-2025-53603

Publication date

2025-07-05 00:00:00

Family

mitre

State

PUBLISHED

Description

In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body.