CVE-2016-6189 | BDVDB-2026-81791 Detail

Description#

Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/inverse-inc/sogo/commit/875a4aca3218340fd4d3141950c82c2ff45b343d
https://github.com/inverse-inc/sogo/commit/717f45f640a2866b76a8984139391fae64339225
http://www.openwall.com/lists/oss-security/2016/07/09/3
https://sogo.nu/bugs/view.php?id=3695

Exploit#

No public exploit known

History#

Version 12017-02-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.