Description (CNA)
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://wiki.zimbra.com/wiki/Security_Center
- https://www.fortiguard.com/zeroday/FG-VD-15-080
- https://www.fortiguard.com/zeroday/FG-VD-15-081
- https://bugzilla.zimbra.com/show_bug.cgi?id=101435
- https://bugzilla.zimbra.com/show_bug.cgi?id=101436
ADP enrichment
No English description supplied.