In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38750.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p11:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p26:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p3:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p30:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p31:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p32:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p32"
},
{
"last_affected": "8.8.15-p32"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p33:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p33"
},
{
"last_affected": "8.8.15-p33"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p34:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p34"
},
{
"last_affected": "8.8.15-p34"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p35:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p35"
},
{
"last_affected": "8.8.15-p35"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p40:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p40"
},
{
"last_affected": "8.8.15-p40"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:8.8.15:p5:*:*:*:*:*:*",
"range": [
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0"
},
{
"last_affected": "9.0.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p0:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p0"
},
{
"last_affected": "9.0.0-p0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p19:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p23:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p25:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p25"
},
{
"last_affected": "9.0.0-p25"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p26:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p26"
},
{
"last_affected": "9.0.0-p26"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p27:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p27"
},
{
"last_affected": "9.0.0-p27"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p28:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p28"
},
{
"last_affected": "9.0.0-p28"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p33:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p33"
},
{
"last_affected": "9.0.0-p33"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p4:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p7:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:9.0.0:p7.1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0.0-p7\\.1"
},
{
"last_affected": "9.0.0-p7\\.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:zimbra:zimbra:10.0.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.0.1"
},
{
"last_affected": "10.0.1"
}
],
"source": "CPE_STRING"
}
]
}