CVE-2024-45516

A Cross-Site Scripting (XSS) vulnerability exists in the Zimbra Collaboration (ZCS) Classic UI due to insufficient sanitization of HTML content, specifically malformed tags with embedded JavaScript. Attackers can trigger this by having a user view a specially crafted email, allowing for the exec...

Zimbra Collaboration Server 8.0.0 < 8.8.15 Patch 46, 9.0.0 < 9.0.0 Patch 41, 10.0 < 10.0.9, 10.1.0 < 10.1.1 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities including: - Fixed a security vulnerability in the postjournal service which may allow unauthenticated users to execute commands. CVE-2024-45519 - A Server-Side Request Forgery SSRF...