Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39755
HistoryMar 13, 2023 - 1:30 a.m.

Cross-site Scripting (XSS)

2023-03-1301:30:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
sogo
identity handler
javascript

0.001 Low

EPSS

Percentile

30.6%

sogo is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in the _migrateMailIdentities function in SOGoUserDefaults.m of Identity Handler component, allowing an attacker to inject and execute malicious javascript

0.001 Low

EPSS

Percentile

30.6%