Security Advisory

CVE-2023-48432

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-13 00:00:00

Last updated 2025-03-25 16:01:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can occur via JavaScript code in a link (for a webmail redirection endpoint) within en email message, e.g., if a victim clicks on that link within Zimbra webmail.

← Browse all CVEs View on cve.org ↗