An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execute arbitrary JavaScript code, leading to information disclosure.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45913.json"
}{
"cpe": [
"cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p32:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p33:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p34:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p20:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.15-NA"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "8.8.15-p1"
},
{
"last_affected": "8.8.15-p1"
},
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p32"
},
{
"last_affected": "8.8.15-p32"
},
{
"introduced": "8.8.15-p33"
},
{
"last_affected": "8.8.15-p33"
},
{
"introduced": "8.8.15-p34"
},
{
"last_affected": "8.8.15-p34"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "9.0.0-NA"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "9.0.0-p0"
},
{
"last_affected": "9.0.0-p0"
},
{
"introduced": "9.0.0-p1"
},
{
"last_affected": "9.0.0-p1"
},
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "9.0.0-p20"
},
{
"last_affected": "9.0.0-p20"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p25"
},
{
"last_affected": "9.0.0-p25"
},
{
"introduced": "9.0.0-p26"
},
{
"last_affected": "9.0.0-p26"
},
{
"introduced": "9.0.0-p27"
},
{
"last_affected": "9.0.0-p27"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
},
{
"introduced": "9.0.0-p7\\.1"
},
{
"last_affected": "9.0.0-p7\\.1"
}
],
"source": "CPE_STRING"
}