| Package | Affected versions | Patched versions |
|---|---|---|
| collaboration | = 9.0.0< 9.0.0 | 9.0.0 |
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free