VDB
BDU%3A2023-04305
BDU%3A2023-04305
PUBLISHED
CVSS 8.800000190734863 HIGH
Уязвимость функции autoSaveDraft корпоративной системы управления электронной почтой Zimbra Collaboration Suite (ZCS), позволяющая нарушителю проводить межсайтовые сценарные атаки
Risk Scores
CVSS 3.1
8.800000190734863
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zimbra Inc. | Zimbra Collaboration Suite |
Timeline
- Aug 1, 2023 CVE Published
References
- https://www.threatintelreport.com/2023/07/27/threat_actor_profiles/cve-2023-37580-zimbra-collaboration-zcs-cross-site-scripting-xss-vulnerability/ url
- https://www.cisa.gov/news-events/alerts/2023/07/27/cisa-adds-one-known-exploited-vulnerability-catalog url
- https://www.helpnetsecurity.com/2023/07/17/cve-2023-34192/ url
- https://wiki.zimbra.com/wiki/Security_Center advisory
- https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy advisory