CVE-2022-4558
published 2022-12-16CVE-2022-4558: A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file…
PriorityP427medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.56%
43.4th percentile
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alinto | sogo | < 5.8.0 | 5.8.0 |
| alinto | sogo | — | — |
| alinto | sogo | — | — |
| alinto | sogo | >= 0 < 5.8.0-1 | 5.8.0-1 |
| alinto | sogo | >= 0 < 5.8.0-1 | 5.8.0-1 |
| alinto | sogo | >= 0 < 5.8.0-1 | 5.8.0-1 |
| debian | sogo | < sogo 5.8.0-1 (bookworm) | sogo 5.8.0-1 (bookworm) |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
osv6.1MEDIUM
vendor_debian3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r8x7-gmq5-6256: A vulnerability was found in Alinto SOGo up to 5
ghsa_unreviewed·2022-12-22
CVE-2022-4558 [MEDIUM] CWE-79 GHSA-r8x7-gmq5-6256: A vulnerability was found in Alinto SOGo up to 5
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
OSV
CVE-2022-4558: A vulnerability was found in Alinto SOGo up to 5
osv·2022-12-16·CVSS 6.1
CVE-2022-4558 [MEDIUM] CVE-2022-4558: A vulnerability was found in Alinto SOGo up to 5
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
Debian
CVE-2022-4558: sogo - A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as ...
vendor_debian·2022·CVSS 3.5
CVE-2022-4558 [LOW] CVE-2022-4558: sogo - A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as ...
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
Scope: local
bookworm: resolved (fixed in 5.8.0-1)
bullseye: open
forky: resolved (fixed in 5.8.0-1)
sid: resolved (fixed in 5.8.0-1)
trixie: resolved (fixed in 5.8.0-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Alinto/sogo/commit/1e0f5f00890f751e84d67be4f139dd7f00faa5f3https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0https://vuldb.com/?id.215961https://github.com/Alinto/sogo/commit/1e0f5f00890f751e84d67be4f139dd7f00faa5f3https://github.com/Alinto/sogo/releases/tag/SOGo-5.8.0https://vuldb.com/?id.215961
2022-12-16
Published