CVE-2024-45516

A Cross-Site Scripting (XSS) vulnerability exists in the Zimbra Collaboration (ZCS) Classic UI due to insufficient sanitization of HTML content, specifically malformed tags with embedded JavaScript. This flaw allows an attacker to execute arbitrary JavaScript within a user's session by triggerin...

Zimbra Collaboration Server 8.0.0 < 8.8.15 Patch 46, 9.0.0 < 9.0.0 Patch 41, 10.0 < 10.0.9, 10.1.0 < 10.1.1 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities including: - Fixed a security vulnerability in the postjournal service which may allow unauthenticated users to execute commands. CVE-2024-45519 - A Server-Side Request Forgery SSRF...