deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-42511
Published: 2022-12-16
Description: In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762712References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42512
Published: 2022-12-16
Description: In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763050References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42513
Published: 2022-12-16
Description: In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763204References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42514
Published: 2022-12-16
Description: In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763298References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42515
Published: 2022-12-16
Description: In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763503References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42516
Published: 2022-12-16
Description: In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763577References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42517
Published: 2022-12-16
Description: In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763682References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42518
Published: 2022-12-16
Description: In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242536278References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42519
Published: 2022-12-16
Description: In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242540694References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42520
Published: 2022-12-16
Description: In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242994270References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42521
Published: 2022-12-16
Description: In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130019References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42522
Published: 2022-12-16
Description: In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130038References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42523
Published: 2022-12-16
Description: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243376893References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42524
Published: 2022-12-16
Description: In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243401445References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42525
Published: 2022-12-16
Description: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509750References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42526
Published: 2022-12-16
Description: In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509880References: N/A
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42527
Published: 2022-12-16
Description: In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244448906References: N/A
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42529
Published: 2022-12-16
Description: Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42530
Published: 2022-12-16
Description: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242331893References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42531
Published: 2022-12-16
Description: In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231500967References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-770, CWE-770
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42532
Published: 2022-12-16
Description: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242332610References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42534
Published: 2022-12-16
Description: In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237838301References: N/A
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42535
Published: 2022-12-16
Description: In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770183
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42542
Published: 2022-12-16
Description: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42543
Published: 2022-12-16
Description: In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-249998113References: N/A
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-42544
Published: 2022-12-16
Description: In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390
CVSS Score: 7.8 (HIGH)
CWE: CWE-74, CWE-74
References: https://source.android.com/security/bulletin/pixel/2022-12-01; https://source.android.com/security/bulletin/pixel/2022-12-01
CVE: CVE-2022-44462
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-44468
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-44469
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-44473
Published: 2022-12-16
Description: Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-59.html
CVE: CVE-2022-44498
Published: 2022-12-16
Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-60.html; https://helpx.adobe.com/security/products/illustrator/apsb22-60.html
CVE: CVE-2022-44499
Published: 2022-12-16
Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-60.html; https://helpx.adobe.com/security/products/illustrator/apsb22-60.html
CVE: CVE-2022-44500
Published: 2022-12-16
Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-60.html; https://helpx.adobe.com/security/products/illustrator/apsb22-60.html
CVE: CVE-2022-44502
Published: 2022-12-16
Description: Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-60.html; https://helpx.adobe.com/security/products/illustrator/apsb22-60.html
CVE: CVE-2022-45796
Published: 2022-12-16
Description: Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or earlier, and Digital Multifunctional System (Monochrome) 200 or earlier, 211 or earlier, 102 or earlier, 453 or earlier, 400 or earlier, 202 or earlier, 602 or earlier, 500 or earlier, 401 or earlier allows remote attackers to execute arbitrary commands via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77, CWE-77
References: http://seclists.org/fulldisclosure/2024/Jul/0; https://global.sharp/products/copier/info/info_security_2022-11.html; https://jvn.jp/en/vu/JVNVU96195138/index.html
CVE: CVE-2022-46135
Published: 2022-12-16
Description: In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/MegaTKC/AeroCMS/issues/5; https://github.com/MegaTKC/AeroCMS/issues/5
CVE: CVE-2022-46137
Published: 2022-12-16
Description: AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/MegaTKC/AeroCMS/issues/7; https://github.com/MegaTKC/AeroCMS/issues/7
CVE: CVE-2022-4130
Published: 2022-12-16
Description: A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.
CVSS Score: 4.5 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=2145254; https://bugzilla.redhat.com/show_bug.cgi?id=2145254
CVE: CVE-2022-4326
Published: 2022-12-16
Description: Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html; https://docs.trellix.com/bundle/xagent_35-31-22_rn/page/UUID-73c848e7-6107-fe11-d83d-b17bd5b1449c.html
CVE: CVE-2022-41992
Published: 2022-12-16
Description: A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can lead to an out-of-bounds write. A victim needs to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1644; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1644
CVE: CVE-2022-46109
Published: 2022-12-16
Description: Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z1r00/IOT_Vul/tree/main/Tenda/AC10/formSetClientState; https://github.com/z1r00/IOT_Vul/tree/main/Tenda/AC10/formSetClientState
CVE: CVE-2022-4556
Published: 2022-12-16
Description: A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting. The attack may be launched remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is efac49ae91a4a325df9931e78e543f707a0f8e5e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215960.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://github.com/Alinto/sogo/commit/efac49ae91a4a325df9931e78e543f707a0f8e5e; https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0; https://vuldb.com/?id.215960
CVE: CVE-2022-4558
Published: 2022-12-16
Description: A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-707
References: https://github.com/Alinto/sogo/commit/1e0f5f00890f751e84d67be4f139dd7f00faa5f3; https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0; https://vuldb.com/?id.215961