CVE-2020-18984

2021-12-1523:15:08

Google

osv.dev

xss

zimbra

collaboration

vulnerability

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

36.2%

JSON

A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection.

References

github.com/buxu/bug/issues/2