512 matches found
DEBIAN-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
UBUNTU-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
PT-2024-25916
Name of the Vulnerable Software and Affected Versions Alinto SOGo versions through 5.10.0 Description The issue allows for XSS during attachment preview. Recommendations For versions through 5.10.0, update to a version later than 5.10.0 to resolve the issue. At the moment, there is no information...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
The SOGo groupware server (versions through 5.10.0 ) is vulnerable to Cross-site Scripting (XSS) during the attachment preview process. This occurs because the software fails to properly sanitize attachments when they are previewed, allowing a remote attacker to execute malicious scripts in a use...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462: Improper Neutralization of Input During Web Page Generation
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
Html Injection
libSOGo.so is vulnerable to HTML injection. The vulnerability is due to improper HTML sanitization within the SOGo Web Mail component, allowing an attacker to preform a phishing attack...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
DEBIAN-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
Design/Logic Flaw
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
UBUNTU-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
SOGo Security Breach
SOGo is a very fast and scalable modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in SOGo version 5.8.0, which stems from an HTML injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo prior to 5.9.1 is vulnerable to an HTML Injection issue (CVE-2023-48104). Affected product: SOGo; vulnerable component/behavior is HTML injection in the web interface. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, no privileges required, user interaction required, scop...