Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mailcow/mailcow-dockerized
master @ 2ac4b1d
205
Fixes
24
CVEs
CRITICAL
Peak severity
41.9%
Coverage
Highlights
Auth Bypass: 106 prior fixes. Scrutinize any change in this area.
data/web/inc/functions.inc.php: most-fixed (38 issues). Treat as high-risk during review.
111 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A critical logic error in Nginx auth_request handling within sogo-auth.php allowed complete authentication bypass via incorrect string prefix comparison patterns. Close review of SSO, proxy authentication, and URL parsing logic here is vital to preventing unauthorized mailbox access.
Command Injection: The custom parameter processing logic for imapsync Sync Jobs allowed remote command injection. Attackers could supply dangerous arguments like 'pipemess' or 'pipemes' inside the database custom parameters to trigger arbitrary shell execution within the container.
Auth Bypass: Session logic was susceptible to multi-factor authentication (2FA/TFA) bypasses, where parameters like 'skip_tfa' or flaws in session state validation allowed users with primary credentials or specific API configurations to bypass mandatory second-factor checks entirely.