| Package | Affected versions | Patched versions |
|---|---|---|
| zimbra collaboration suite | = 8.7.11= 8.8.10= 8.8.11= 8.8.9≥ 8.7.0, < 8.7.11≥ 8.8.0, < 8.8.9 | 8.7.118.8.9 |
ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free