tocsin

Debian/sogo: medium 6.1

Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component.

Action: Upgrade sogo to 5.8.0-2+deb12u1 or later.

Affected

introducedfixedlast affected
05.8.0-2+deb12u1-

Fixed versions

5.8.0-2+deb12u1

Sources

published · modified · JSON