In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body.
2025-07-05T01:15:27.360
2025-07-08T16:18:53.607
Awaiting Analysis
CVSSv3.1: 7.5 (HIGH)
-