CVE-2023-24031 | BDVDB-2026-204949 Detail

Description#

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
https://wiki.zimbra.com/wiki/Security_Center

Exploit#

No public exploit known

History#

Version 12023-06-15Record published in the CVE List.
Version 22024-12-18Most recent update recorded in the CVE List.