CVE-2022-41351
In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing t...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string (instead of default value of 10).
Références
- advisory github.com
- advisory nvd.nist.gov
- web wiki.zimbra.com
- web wiki.zimbra.com