SOGo vulnerability in password reset links
SOGo uses client-supplied Origin header for password reset links, allowing remote attackers to obtain tokens and take over user accounts.
1 stories, newest first · one card per story
SOGo uses client-supplied Origin header for password reset links, allowing remote attackers to obtain tokens and take over user accounts.
Today 666 readers · 784 views · 173 reads · all time 173K views