| Package | Affected versions | Patched versions |
|---|---|---|
| zed! | ≥ 2023.0, < 2023.5≥ q.2021.0, < q.2021.2< 2023.5< q.2020.3 | 2023.5q.2021.2q.2020.3 |
| zedmail | < 2023.5 | 2023.5 |
| zonecentral | ≥ 2023.0, < 2023.5< q.2021.2 | 2023.5q.2021.2 |
ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; ZED! for Windows, Mac, Linux before 2023.5; ZEDFREE for Windows, Mac, Linux before 2023.5; or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger network access to an attacker-controlled computer when opened by the victim.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free