CVE-2024-45515

A Cross-Site Scripting (XSS) vulnerability exists in Zimbra Collaboration (ZCS) through version 10.1 and prior. The root cause is the insufficient validation of content type metadata during the file import process into the briefcase (or portfolio). A remote attacker can exploit this by crafting a...

CVE-2021-43802

Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an .etherpad file that, when imported, might allow the attacker to gain admin privileges for the Etherpad instance. This, in turn, can be used to install a malicious Etherpad plugin that can execute...