CVE-2025-53603 – Alinto SOPE SOGo NULL Pointer Dereference

CVE ID : CVE-2025-53603

Published : July 5, 2025, 1:15 a.m. | 1 hour, 44 minutes ago

Description : In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…