CVE-2022-4558: Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 5.8.0 is able to address this issue. The name of the patch is 1e0f5f00890f751e84d67be4f139dd7f00faa5f3. It is recommended to upgrade the affected component. The identifier VDB-215961 was assigned to this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4558?
CVE-2022-4558 has been classified as problematic due to its impact on cross site scripting.
How do I fix CVE-2022-4558?
To mitigate CVE-2022-4558, upgrade to SOGo version 5.8.0 or later.
What components of SOGo are affected by CVE-2022-4558?
CVE-2022-4558 affects the Folder/Mail Handler component in the SoObjects/SOGo/NSString+Utilities.m file.
Can CVE-2022-4558 lead to data exposure?
Yes, due to its cross site scripting nature, CVE-2022-4558 can potentially expose sensitive user data.
Who is affected by CVE-2022-4558?
Users running SOGo versions up to 5.7.1 are affected by CVE-2022-4558.