CVE-2023-24031

MEDIUM 6.1CVE-2023-24031 · Published 15/06/2023 · updated 17/06/2026

In short

CVE-2023-24031 is a MEDIUM (CVSS 6.1) vulnerability affecting collaboration (zimbra).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
collaboration zimbra	`= 9.0.0`	No fix yet

Description

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.

References

wiki.zimbra.com/wiki/Security_Center · Release Notes
wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

More vulnerabilities in collaboration

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

collaboration

zimbra

= 9.0.0

No fix yet

More vulnerabilities in collaboration

See all →