CyberRota Analysis
AI-GeneratedSOGo versions prior to 5.12.11 are vulnerable due to improper handling of the Origin header in password-reset link construction, allowing unauthenticated attackers to redirect recovery tokens to their own domains. This flaw enables attackers to initiate password recovery requests and potentially gain access to user accounts by intercepting valid reset tokens. Organizations using affected versions should prioritize patching to mitigate the risk of account takeover.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a malicious Origin header to have valid password-reset tokens mailed to victim recovery addresses within links pointing to attacker infrastructure, enabling account takeover.