CVE-2019-11318

Description

References

• bugzilla.zimbra.com/show_bug.cgi · Issue Tracking
• wiki.zimbra.com/wiki/Security_Center · Patch
• wiki.zimbra.com/wiki/Zimbra_Releases/8.8.12/P1 · Patch
• wiki.zimbra.com/wiki/Zimbra_Security_Advisories · Vendor Advisory

zimbra collaboration server의 다른 취약점

• CVE-2015-2249보통 5.4Zimbra Collaboration before 8.6.0 patch5 has XSS.
• CVE-2014-8563심각 9.8Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
• CVE-2014-5500보통 6.1Synacor Zimbra Collaboration before 8.0.8 has XSS.
• CVE-2015-2230보통 6.1Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.