CVE-2024-24510

Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail...

Original description

The description as published by the source.

Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-24510 sogo
Ubuntu UBUNTU-CVE-2024-24510 sogo

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web book.hacktricks.xyz