Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.

Published Feb 13, 2024 · Updated Aug 19, 2024 · Assigned by mitre