CVE-2024-34462

2024-05-0419:15:46

Google

osv.dev

alinto

sogo

xss

attachment

preview

vulnerability

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Alinto SOGo through 5.10.0 allows XSS during attachment preview.

CPENameOperatorVersion
sogoeqSOGo-3.2.3
sogoeqSOGo-4.1.1
sogoeqSOGo-3.2.4
sogoeqSOGo-3.0.0b1
sogoeqSOGo-2.2.20
sogoeqSOGo-3.0.1
sogoeqSOGo-5.5.0
sogoeqSOGo-5.5.1
sogoeqSOGo-3.0.0b4
sogoeqSOGo-2.2.17a

Name	Operator	Version
sogo	eq	SOGo-3.2.3
sogo	eq	SOGo-4.1.1
sogo	eq	SOGo-3.2.4
sogo	eq	SOGo-3.0.0b1
sogo	eq	SOGo-2.2.20
sogo	eq	SOGo-3.0.1
sogo	eq	SOGo-5.5.0
sogo	eq	SOGo-5.5.1
sogo	eq	SOGo-3.0.0b4
sogo	eq	SOGo-2.2.17a