CVE-2023-24031

Published: Jun 15, 2023Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.

Affected (23)

Products: Zimbra: Collaboration

Zimbra

1 product

Collaboration

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Zimbra Collaboration	Version 9.0.0
Zimbra Collaboration	Version 9.0.0 p0
Zimbra Collaboration	Version 9.0.0 p10
Zimbra Collaboration	Version 9.0.0 p11
Zimbra Collaboration	Version 9.0.0 p12
Zimbra Collaboration	Version 9.0.0 p13
Zimbra Collaboration	Version 9.0.0 p14
Zimbra Collaboration	Version 9.0.0 p15
Zimbra Collaboration	Version 9.0.0 p19
Zimbra Collaboration	Version 9.0.0 p1
Zimbra Collaboration	Version 9.0.0 p23
Zimbra Collaboration	Version 9.0.0 p25
Zimbra Collaboration	Version 9.0.0 p26
Zimbra Collaboration	Version 9.0.0 p27
Zimbra Collaboration	Version 9.0.0 p2
Zimbra Collaboration	Version 9.0.0 p3
Zimbra Collaboration	Version 9.0.0 p4
Zimbra Collaboration	Version 9.0.0 p5
Zimbra Collaboration	Version 9.0.0 p6
Zimbra Collaboration	Version 9.0.0 p7.1
Zimbra Collaboration	Version 9.0.0 p7
Zimbra Collaboration	Version 9.0.0 p8
Zimbra Collaboration	Version 9.0.0 p9