Synacor Zimbra Collaboration cross-site scripting vulnerability

Versions of Synacor Zimbra Collaboration prior to 10.1.21 contain a cross-site scripting vulnerability. This flaw arises because the Content-Location MIME header in email attachments is not properly sanitized. Attackers can set this header to javascript: URI, potentially leading to stored...