2 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...
6.8CVSS7.9AI score0.00928EPSS
SaveExploits0References5Affected Software1
CVE-2016-3406
Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...
8.8CVSS5.8AI score0.00928EPSS
SaveExploits0References5
20