Zimbra Collaboration Suite processing logic error vulnerability

Versions of Zimbra Collaboration Suite prior to 10.1.21 contain a logic error vulnerability stemming from hostname normalization issues in the email HTML cleaner. DefangFilter and OWASP ActionAttributePolicy compare the form action hostname with the request hostname prior to browser URL...