CVE-2018-10948

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-10948
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-10948
Published
2019-05-30T18:29:02.550Z
Modified
2026-07-08T05:52:07.623235960Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "8.7.1"
                },
                {
                    "last_affected": "8.7.1"
                },
                {
                    "last_affected": "8.7.1"
                },
                {
                    "last_affected": "8.7.1"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "synacor:zimbra_collaboration_suite",
            "cpes": [
                "cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git
github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
7e67bbd1e09e5245a71b7936fa31f0106ee3b354
Last affected
7e67bbd1e09e5245a71b7936fa31f0106ee3b354
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.0-beta1"
        },
        {
            "last_affected": "8.8.0-beta1"
        }
    ]
}

Affected versions

8.*
8.8.0-beta1
8.8.0.beta1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"
github.com/zimbra/zm-mailbox

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
cbc8fb6c44e917d86f27f5585940e76ddb1be2fd
Last affected
cbc8fb6c44e917d86f27f5585940e76ddb1be2fd
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.0-beta1"
        },
        {
            "last_affected": "8.8.0-beta1"
        }
    ]
}

Affected versions

8.*
8.8.0-beta1
8.8.0.beta1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"
github.com/zimbra/zm-zcs

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs
Events
Introduced
54b83393aafc91e0f9f7b30adb3add695facb601
Last affected
54b83393aafc91e0f9f7b30adb3add695facb601
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.0-beta1"
        },
        {
            "last_affected": "8.8.0-beta1"
        }
    ]
}

Affected versions

8.*
8.8.0-beta1
8.8.0.beta1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"
github.com/zimbra/zm-zcs-lib

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs-lib
Events
Introduced
68e907ff3d4d17c5b93455349671584eab4725fd
Last affected
68e907ff3d4d17c5b93455349671584eab4725fd
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.0-beta1"
        },
        {
            "last_affected": "8.8.0-beta1"
        }
    ]
}

Affected versions

8.*
8.8.0-beta1
8.8.0.beta1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"