CoreCVE
Back

MEDIUM

Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code

Published Jun 14, 2023

Description

Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive information when a user reads an email containing malicious code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Jun 14, 2023
Updated Jan 3, 2025
Reserved Aug 13, 2020
Link CVE-2020-22402

CISA Vulnrichment

Updated Jan 3, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-22402

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Jun 14, 2023
Updated Jan 3, 2025
Link EUVD-2020-15164

GitHub

No data