CVE-2020-18985

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-18985
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18985.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-18985
Published
2021-12-15T23:15:08.740Z
Modified
2026-07-09T00:21:24.090859Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.

References

Affected packages

Git
github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
a3f5dae50fd9c34d9802c5fb2783dd130a600eff
Last affected
a3f5dae50fd9c34d9802c5fb2783dd130a600eff
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.12-NA"
        },
        {
            "last_affected": "8.8.12-NA"
        }
    ]
}

Affected versions

8.*
8.8.12
8.8.12-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18985.json"
github.com/zimbra/zm-mailbox

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
85d81f636d6cb4ce5a66ac5823494ecb78f84b95
Last affected
85d81f636d6cb4ce5a66ac5823494ecb78f84b95
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.12-NA"
        },
        {
            "last_affected": "8.8.12-NA"
        }
    ]
}

Affected versions

8.*
8.8.12
8.8.12-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18985.json"
github.com/zimbra/zm-zcs

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs
Events
Introduced
aa13056509ffbbf7434066e6280b0f0208307268
Last affected
aa13056509ffbbf7434066e6280b0f0208307268
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.12-NA"
        },
        {
            "last_affected": "8.8.12-NA"
        }
    ]
}

Affected versions

8.*
8.8.12
8.8.12-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18985.json"
github.com/zimbra/zm-zcs-lib

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs-lib
Events
Introduced
8fc797a26d4b5bc40b8d3fc124c89e30e20a8790
Last affected
8fc797a26d4b5bc40b8d3fc124c89e30e20a8790
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.8.12-NA"
        },
        {
            "last_affected": "8.8.12-NA"
        }
    ]
}

Affected versions

8.*
8.8.12
8.8.12-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18985.json"