Non évaluée

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to...

CVE-2026-33372 Première détection SecPulse Mar 20, 09:00

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A cross-site request forgery (CSRF) vulnerability exists in Zimbra Webmail due to improper validation of CSRF tokens. The application accepts CSRF tokens supplied within the request body instead of requiring them through the expected request header. An attacker can exploit this issue by tricking an authenticated user into submitting a crafted request. This may allow unauthorized actions to be performed on behalf of the victim.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

Faits clés

Gravité: Non évaluée
Publication: Mar 20, 2026
Première détection SecPulse: Mar 20, 09:00

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:54