Description
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.
Unscored
CVE-2023-24031
EUVD-2023-28095GHSA-m2w7-whw4-8q9h
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to …
Published Jun 15, 2023 · Updated Dec 18, 2024 · Assigned by mitre