| Package | Affected versions | Patched versions |
|---|---|---|
| collaboration | = 8.8.15= 9.0.0≥ 8.8, < 8.8.15 | 8.8.15 |
An issue was discovered in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.0 before 9.0.0 Patch 16. An XSS vulnerability exists in the login component of Zimbra Web Client, in which an attacker can execute arbitrary JavaScript by adding executable JavaScript to the loginErrorCode parameter of the login url.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free