512 matches found
CVE-2022-4558
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-4558: Improper Neutralization
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-4556: Improper Neutralization
A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...
CVE-2022-4556
A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...
CVE-2022-4558
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...
CVE-2022-4556 Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting
A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...
CVE-2022-4556
CVE-2022-4556 affects Alinto SOGo up to version 5.7.1. The vulnerability resides in Identity Handler’s function _migrateMailIdentities in SoObjects/SOGo/SOGoUserDefaults.m, where manipulating the fullName argument enables a stored cross-site scripting (XSS) condition. The issue can be triggered r...
CVE-2022-4558
CVE-2022-4558 affects Alinto SOGo up to version 5.7.1. A cross-site scripting vulnerability exists in an unknown part of the file SoObjects/SOGo/NSString+Utilities.m within the Folder/Mail Handler component. It can be triggered remotely. A patch is available: upgrade to version 5.8.0 (patch ident...
PT-2022-27576 · Alinto +2 · Alinto Sogo +2
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions up to 5.7.1 Description: A problematic issue has been found, affecting an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. ...
PT-2022-27574 · Alinto +2 · Alinto Sogo +2
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions up to 5.7.1 Description: A vulnerability was found in the Identity Handler component, specifically in the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m. The manipulation of the argument...
Debian DSA-5029-1 : sogo - security update
The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5029 advisory. It was discovered that missing SAML signature validation in the SOGo groupware could result in impersonation attacks. For the oldstable distribution buster, this...
Debian: Security Advisory (DSA-5029-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5029-1] sogo security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5029-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 22, 2021 https://www.debian.org/security/faq -...
DSA-5029-1 sogo - security update
Bulletin has no description...
The vulnerability of the authentication method for the SOGo collaborative work system, which stems from incorrect verification of the cryptographic signature of data, allows attackers to compromise the integrity of the data.
The vulnerability of the SOGo collaborative computing software’s authentication method is related to improper verification of the data’s cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
Insecure Signature Validation
SOGo is using insecure signature validation. It does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deployment could impersonate users when SAML is the authentication method...
Debian DLA-2707-1 : sogo - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2707 advisory. - SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deploymen...
Debian: Security Advisory (DLA-2707-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2707-1] sogo security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2707-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 12, 2021 https://wiki.debian.org/LTS -...