Back

CVE-2024-24510

Sept. 9, 2024, 7:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Alinto SOGo

  • before 5.10.0

Source

cve@mitre.org

Tags

cve@mitre.org
2024-09-09
CVE-2024-24510

CVE-2024-24510 details

Published : Sept. 9, 2024, 7:15 p.m.
Last Modified : Sept. 9, 2024, 7:15 p.m.

Description

Cross Site Scripting vulnerability in Alinto SOGo before 5.10.0 allows a remote attacker to execute arbitrary code via the import function to the mail component.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://book.hacktricks.xyz/pentesting-web/xs-search/css-injection cve@mitre.org
https://github.com/Alinto/sogo/commit/21468700718ed71774eaf2979ee59330fc569424 cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.