In Zimbra Collaboration Suite (ZCS)... CVE-2022-37044

- AV AC AU C I A
发布： 2022-08-12
修订： 2024-11-21

In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partially sanitised and lead to reflected XSS that allows executing arbitrary JavaScript on the victim's machine.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息