VYPR

Sogo Web Mail Vulnerability CVE 2025 50340

by Millad7

CVEs (1)

  • CVE-2025-50340MedAug 4, 2025
    risk 0.28cvss 4.3epss 0.00

    An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify…