CVE-2016-3406

Multiple cross-site request forgery CSRF vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to hijack the authentication of unspecified victims via vectors involving 1 the Client uploader extension or 2 extension REST handlers, aka bugs 104294 and 104456...

CVE-2016-3406

CVE-2016-3406 affects Zimbra Collaboration Server prior to 8.7.0, where CSRF vulnerabilities exist in the Client uploader extension and in extension REST handlers (bugs 104294/104456). The impact is that an attacker could hijack a user’s authenticated session. Connected sources confirm the affect...