VU#487613: Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations
Imported from official source
Overview A cross-site scripting (XSS) vulnerability in Alinto SOGo v5.12.7 allows attackers to achieve remote code execution by embedding malicious SVG (Scalable Vector Graphics) objects in ICS (iCalendar) invitations. The vulnerability has been actively exploited in the wild, as confirmed by VirusTotal sightings. …
This version
- Version
- 1 of 1
- Recorded
- September 15, 2026 20:57
- Change
- Initial
- Content hash
ee52081619e542d82ea2e135f9e9d1d9- All versions
- Revision history