CVE-2024-34462

2024-05-0419:15:46

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-34462

alinto sogo

xss

attachment preview

unix

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

Alinto SOGo through 5.10.0 allows XSS during attachment preview.

OSVersionArchitecturePackageVersionFilename
Debian12allsogo<= 5.8.0-1sogo_5.8.0-1_all.deb
Debian11allsogo<= 5.0.1-4+deb11u1sogo_5.0.1-4+deb11u1_all.deb
Debian10allsogo<= 4.0.7-1+deb10u2sogo_4.0.7-1+deb10u2_all.deb
Debian999allsogo<= 5.10.0-2sogo_5.10.0-2_all.deb
Debian13allsogo<= 5.10.0-2sogo_5.10.0-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	sogo	<= 5.8.0-1	sogo_5.8.0-1_all.deb
Debian	11	all	sogo	<= 5.0.1-4+deb11u1	sogo_5.0.1-4+deb11u1_all.deb
Debian	10	all	sogo	<= 4.0.7-1+deb10u2	sogo_4.0.7-1+deb10u2_all.deb
Debian	999	all	sogo	<= 5.10.0-2	sogo_5.10.0-2_all.deb
Debian	13	all	sogo	<= 5.10.0-2	sogo_5.10.0-2_all.deb