In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38750.json",
"cna_assigner": "mitre",
"unresolved_ranges": [
{
"source": "DESCRIPTION",
"extracted_events": [
{
"introduced": "8"
},
{
"fixed": "8.8.15"
},
{
"introduced": "9"
},
{
"fixed": "9.0.0"
},
{
"introduced": "10"
},
{
"fixed": "10.0.2"
}
]
}
]
}{
"cpe": [
"cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p32:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p33:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p34:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p35:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p40:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:8.8.15:p5:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p0:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p19:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p23:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p25:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p27:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p28:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p33:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p7:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:9.0.0:p7.1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:zimbra:10.0.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.8.0"
},
{
"fixed": "8.8.15"
},
{
"introduced": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "8.8.15-p32"
},
{
"last_affected": "8.8.15-p32"
},
{
"introduced": "8.8.15-p33"
},
{
"last_affected": "8.8.15-p33"
},
{
"introduced": "8.8.15-p34"
},
{
"last_affected": "8.8.15-p34"
},
{
"introduced": "8.8.15-p35"
},
{
"last_affected": "8.8.15-p35"
},
{
"introduced": "8.8.15-p40"
},
{
"last_affected": "8.8.15-p40"
},
{
"introduced": "8.8.15-p5"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "9.0.0"
},
{
"last_affected": "9.0.0"
},
{
"introduced": "9.0.0-p0"
},
{
"last_affected": "9.0.0-p0"
},
{
"introduced": "9.0.0-p19"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "9.0.0-p23"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "9.0.0-p25"
},
{
"last_affected": "9.0.0-p25"
},
{
"introduced": "9.0.0-p26"
},
{
"last_affected": "9.0.0-p26"
},
{
"introduced": "9.0.0-p27"
},
{
"last_affected": "9.0.0-p27"
},
{
"introduced": "9.0.0-p28"
},
{
"last_affected": "9.0.0-p28"
},
{
"introduced": "9.0.0-p33"
},
{
"last_affected": "9.0.0-p33"
},
{
"introduced": "9.0.0-p4"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "9.0.0-p7"
},
{
"last_affected": "9.0.0-p7"
},
{
"introduced": "9.0.0-p7\\.1"
},
{
"last_affected": "9.0.0-p7\\.1"
},
{
"introduced": "10.0.1"
},
{
"last_affected": "10.0.1"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}