408 matches found
PT-2024-20429 · Alinto +1 · Alinto Sogo +1
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions prior to 5.10.0 Description: A Cross Site Scripting issue exists in Alinto SOGo, allowing a remote attacker to execute arbitrary code via the import function to the mail component. This can be exploited by a remote...
CVE-2024-24510
CVE-2024-24510 : A cross-site scripting vulnerability affects Alinto SOGo before 5.10.0. An attacker can remotely execute arbitrary code through the mail component’s import function. Affected software: Alinto SOGo up to version 5.9.x (prior to 5.10.0). Root cause: input in the import function is ...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
DEBIAN-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
UBUNTU-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
PT-2024-25916
Name of the Vulnerable Software and Affected Versions Alinto SOGo versions through 5.10.0 Description The issue allows for XSS during attachment preview. Recommendations For versions through 5.10.0, update to a version later than 5.10.0 to resolve the issue. At the moment, there is no information...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
CVE-2024-34462 affects Alinto SOGo up to version 5.10.0, enabling Cross-Site Scripting during attachment previews. The incident is documented across multiple feeds (NVD, OSV, Debian LTS DLA-4434) with Debian noting a patch in 5.0.1-4+deb11u3 for the Bullseye release. In practice, affected deploym...
Html Injection
libSOGo.so is vulnerable to HTML injection. The vulnerability is due to improper HTML sanitization within the SOGo Web Mail component, allowing an attacker to preform a phishing attack...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
DEBIAN-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
