Description
Zimbra Collaboration存在跨站脚本漏洞。此漏洞是由于error.jsp对于接收的参数缺乏校验导致的。
Zimbra Collaboration 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
https://www.cvedetails.com/vulnerability-list/vendor_id-7863/product_id-90865/version_id-662246/Zimbra-Collaboration-9.0.0.html?page=1&order=1
https://cve.circl.lu/search?vendor=synacor&product=zimbra_collaboration_suite
https://www.sentinelone.com/vulnerability-database/cve-2025-27915/
https://www.rapid7.com/db/vulnerabilities/zimbra-collaboration-cve-2024-33536/
https://www.cve.circl.lu/search?vendor=zimbra&product=collaboration
https://censys.com/advisory/cve-2024-27443/