CVE-2025-63498

Alinto/SOGo cookie中的存储型XSS 研究者: Daniil Khomichenok, Alexander Klimenko 受影响版本 var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' 接受 XSS 注入作为参数值的登录 remember set-cookie 代码： root@kitploit: if rememberLogin response addCookie: self cookieWithUsername:...