[SECURITY] [DLA 4386-1] sogo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4386-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini November 28, 2025 https://wiki.debian.org/LTS -...

CVE-2025-63498

creationtimestamp| type| source ---|---|--- 2025-11-25 01:18:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6g6az6ajn2s...

Linux Distros Unpatched Vulnerability : CVE-2025-63498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the userName parameter. CVE-2025-63498 Note that Nessus relies on the presence of the package a...

CVE-2025-63498

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the "userName" parameter...

CVE-2025-63498

alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting XSS via the "userName" parameter...

CVE-2025-63498

The Alinto SOGo groupware server is vulnerable to a Cross-Site Scripting (XSS) flaw in versions prior to 5.12.4 . The root cause is the lack of proper sanitization of the "userName" parameter during a POST request to the /SOGo/connect endpoint. When the "Recordar nombre de usuario" (Remember user...