CVE-2023-45207

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0

Medium · published February 13, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through mail that contains malicious JavaScript. While previewing this file in webmail in the Chrome browser, the stored XSS payload is executed. (This has been mitigated by sanitising the JavaScript code present in a PDF document.)

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Published
2024-02-13T00:00Z
EPSS history
Timeline
  • 13 FEB 00:00Z
    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0
    cvelistv5