CVE-2015-5395

HIGH

SOGo <3.1.0 - CSRF

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

References (5)

Core 5
Core References
Patch, Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2015-5395/
Third Party Advisory x_refsource_misc
https://lists.debian.org/debian-lts/2016/05/msg00197.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/07/10/9
Exploit, Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://sogo.nu/bugs/view.php?id=3246

Scores

CVSS v3 8.8
EPSS 0.0090
EPSS Percentile 55.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (4)
alinto/sogo < 3.1.0
debian/debian_linux 7.0
debian/debian_linux 8.0
debian/debian_linux 9.0
Published Sep 20, 2017
Tracked Since Feb 18, 2026