CVE-2018-20160

ZxChat aka ZeXtras Chat, as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd...

CVE-2018-20160

CVE-2018-20160 affects ZxChat (ZeXtras Chat) used in Synacor Zimbra Collaboration Suite 8.7/8.8 and related products. The connected sources confirm an XXE attack vector triggered by a crafted XML request to mailboxd as the root cause. Concrete exploit details, affected versions beyond 8.7/8.8, or...