CVE-2018-14013

Description

References

• packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2019/Feb/3 · Exploit
• openwall.com/lists/oss-security/2019/01/30/1 · Exploit
• securityfocus.com/bid/106787 · Third Party Advisory
• bugzilla.zimbra.com/show_bug.cgi · Issue Tracking
• bugzilla.zimbra.com/show_bug.cgi · Issue Tracking
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

zimbra collaboration suite의 다른 취약점

• CVE-2026-93638보통 6.1A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthenticated attacker to e…
• CVE-2026-93636보통 4.3An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise unreturned attrib…
• CVE-2026-93634보통 4.3A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file re…
• CVE-2026-93633보통 5.4A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a documen…
• CVE-2026-93631높음 7.1A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to …