Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://wiki.zimbra.com/wiki/Security_Center | patch vendor advisory |
https://bugzilla.zimbra.com/show_bug.cgi?id=107878 | vendor advisory issue tracking permissions required |
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories | vendor advisory |
https://bugzilla.zimbra.com/show_bug.cgi?id=107885 | vendor advisory issue tracking permissions required |