CVE-2022-4558

2022-12-1600:00:00

ubuntu.com

alinto sogo

cross site scripting

vulnerability

remote attack

upgrade

1e0f5f00890f751e84d67be4f139dd7f00faa5f3

vdb-215961

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

30.4%

JSON

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been
classified as problematic. This affects an unknown part of the file
SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler.
The manipulation leads to cross site scripting. It is possible to initiate
the attack remotely. Upgrading to version 5.8.0 is able to address this
issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3.
It is recommended to upgrade the affected component. The identifier
VDB-215961 was assigned to this vulnerability.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsogo< anyUNKNOWN
ubuntu20.04noarchsogo< anyUNKNOWN
ubuntu22.04noarchsogo< anyUNKNOWN
ubuntu16.04noarchsogo< anyUNKNOWN