CVE-2023-48104

CVE-2023-48104 HTML-инъекция в веб-клиенте Alinto/SOGo Производитель продукта Alinto Тип уязвимости HTML-инъекция Затронутые версии SOGo Web Mail https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098 Обнаружил Spiridonov Ivan/E1tex PoC Только для демонстрационных целей...

EUVD-2020-15164

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-22402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

Html Injection

libSOGo.so is vulnerable to HTML injection. The vulnerability is due to improper HTML sanitization within the SOGo Web Mail component, allowing an attacker to preform a phishing attack...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

DEBIAN-CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

UBUNTU-CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

Cross site scripting

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

CVE-2020-22402 concerns a Cross Site Scripting (XSS) vulnerability in SOGo Web Mail prior to version 4.3.1 . The issue allows an attacker to obtain user‑sensitive information when a user opens an email containing malicious code. The underlying flaw is an XSS in the web mail interface, enabling da...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

CVE-2020-22402

Cross Site Scripting XSS vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code...

PT-2023-11617 · Unknown · Sogo Web Mail

Name of the Vulnerable Software and Affected Versions: SOGo Web Mail versions prior to 4.3.1 Description: The issue allows attackers to obtain user sensitive information when a user reads an email containing malicious code. This is due to a Cross Site Scripting XSS vulnerability. Recommendations:...