Cybersecurity Alerts

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-79

CWE-138

References

• https://wiki.zimbra.com/wiki/Security_Center
• https://nvd.nist.gov/vuln/detail/CVE-2022-27926