CVE-2015-5395

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2015/07/10/9Mailing List, Third Party Advisory
https://github.com/inverse-inc/sogo/commit/582baf2960969c73f98643e46cfb49432c30b711Patch, Third Party Advisory
https://lists.debian.org/debian-lts/2016/05/msg00197.htmlThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2015-5395/Patch, Third Party Advisory
https://sogo.nu/bugs/view.php?id=3246Exploit, Issue Tracking, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/07/10/9Mailing List, Third Party Advisory
https://github.com/inverse-inc/sogo/commit/582baf2960969c73f98643e46cfb49432c30b711Patch, Third Party Advisory
https://lists.debian.org/debian-lts/2016/05/msg00197.htmlThird Party Advisory
https://security-tracker.debian.org/tracker/CVE-2015-5395/Patch, Third Party Advisory
https://sogo.nu/bugs/view.php?id=3246Exploit, Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Sep 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-53976.8Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.2 allows remote attackers to hijack the CVE-2015-53995.4Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via CVE-2015-54006.8Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to CVE-2015-54017.5Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow CVE-2015-54027.2HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows local user CVE-2015-54034.0HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote aut CVE-2015-54047.5HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote att CVE-2015-54056.5HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote aut CVE-2015-54069.0HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform CVE-2015-54076.0HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform CVE-2015-54086.0HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform CVE-2015-54097.5Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modify data or cause a den