Skip to content
OpenAdvisories

Vendor

Alinto

10 known vulnerabilities.

Products

SOGo 8 SOGo Webmail 1 SOPE 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-93453 Public exploit

    SOGo before 5.12.11 Password Reset Token Interception via Origin Header

    SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a…

    Alinto SOGo sogo sogo Debian Ubuntu
  • Low 3.5
    CVE-2022-4556 Public exploit

    Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting

    A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file SoObjects/SOGo/SOGoUserDefaults.m of the component Identity Handler. The manipulation of the argument…

    Alinto SOGo sogo sogo Debian Ubuntu