medium6.1
CVE-2023-50808
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.
Impact
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zimbra | Collaboration | before 9.0.0 Version 9.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wiki.zimbra.com/wiki/Security_Center
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P38
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
- https://wiki.zimbra.com/wiki/Security_Center
- https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P38
- https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories