Description
In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.
Medium · 6.1
CVE-2022-41349
EUVD-2022-44554GHSA-m64q-8wxg-mfcp
In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter that is vulnerable to Reflected XSS. This …
Published Oct 12, 2022 · Updated May 15, 2025 · Assigned by mitre