136 matches found
CVE-2024-24510
Alinto SOGo versions prior to 5.10.0 are vulnerable to a Cross-Site Scripting (XSS) flaw in the mail component . This vulnerability allows a remote attacker to execute arbitrary code by leveraging the import function . To remediate this issue, users should update to version 5.10.0 or later. As a ...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
PT-2024-20429 · Alinto +1 · Alinto Sogo +1
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions prior to 5.10.0 Description: A Cross Site Scripting issue exists in Alinto SOGo, allowing a remote attacker to execute arbitrary code via the import function to the mail component. This can be exploited by a remote...
CVE-2024-24510
Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component...
DEBIAN-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
UBUNTU-CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
SOGo 安全漏洞
SOGo is a very fast and extensible modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in Alinto SOGo 5.10.0 and prior versions that originates from...
PT-2024-25916
Name of the Vulnerable Software and Affected Versions Alinto SOGo versions through 5.10.0 Description The issue allows for XSS during attachment preview. Recommendations For versions through 5.10.0, update to a version later than 5.10.0 to resolve the issue. At the moment, there is no information...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
The SOGo groupware server (versions through 5.10.0 ) is vulnerable to Cross-site Scripting (XSS) during the attachment preview process. This occurs because the software fails to properly sanitize attachments when they are previewed, allowing a remote attacker to execute malicious scripts in a use...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462: Improper Neutralization of Input During Web Page Generation
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2024-34462
Alinto SOGo through 5.10.0 allows XSS during attachment preview...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
