CVE-2024-34462

CVE-2024-34462 affects Alinto SOGo up to version 5.10.0, enabling Cross-Site Scripting during attachment previews. The incident is documented across multiple feeds (NVD, OSV, Debian LTS DLA-4434) with Debian noting a patch in 5.0.1-4+deb11u3 for the Bullseye release. In practice, affected deploym...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2024-34462

Alinto SOGo through 5.10.0 allows XSS during attachment preview...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

DEBIAN-CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

Design/Logic Flaw

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

UBUNTU-CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo prior to 5.9.1 is vulnerable to an HTML Injection issue (CVE-2023-48104). Affected product: SOGo; vulnerable component/behavior is HTML injection in the web interface. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, no privileges required, user interaction required, scop...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

CVE-2023-48104

Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...

Exploit for Cross-site Scripting in Alinto Sogo

CVE-2023-48104 HTML Injection in Alinto/SOGo Web Client Ve...

SOGo < 5.8.0 Multiple XSS Vulnerabilities

Alinto SOGo formerly Inverse inc. is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2022-4556

A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...

CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

DEBIAN-CVE-2022-4556

A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...

DEBIAN-CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

CVE-2022-4556

A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument fullName leads to cross site scripting...