Non évaluée

Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h...

CVE-2026-33368 Première détection SecPulse Mar 20, 09:00

Description d'origine La description telle que publiée par la source (souvent en anglais).

Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h/rest). The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious JavaScript into a crafted URL. When a victim user accesses the link, the injected script executes in the context of the Zimbra webmail application, which could allow the attacker to perform actions on behalf of the victim.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

Faits clés

Gravité: Non évaluée
Publication: Mar 20, 2026
Première détection SecPulse: Mar 20, 09:00

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:34