CVE-2023-43102

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43102
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43102.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43102
Published
2023-12-07T06:15:54.490Z
Modified
2026-04-10T05:02:29.512571Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
b68c7b31a1d94f94903a79c53f1bd316b792de1d
Fixed
66e1207b3891b9ca25de72da84fd67df0d3a1851
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
62480d2f6aace77ee01bb4b8f46a3eff49cbdfd3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71b1626efff0a90ba64ff3e5ab192683e6dccc9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
905970576d6fe337150f09c0ad7a0f53aa1a8f42
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ae8f73501330bc788daed9c82c1222857d85b8b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe985a33cb83f82816a1e8f93d8d864112a6504e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7209ef3fd859fda5537cc7fbfdeb97cbd1ab931
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c2b2cd41fa3625cbd1c12f4e14e07eece395a31
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3dbd48fe84d22132463b3758e3a40be19267fc9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dbb831c2de39b20cda7ea1e0063645d3cb6d1770
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d471250d21cf4051227b7513e16df3a1f56ba86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e40da921adb967639011de45841cef4c4601413
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b6cd8f69d2761c014d4a3807f0bdee0011386444
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de2eedbbdb8d58c34aac58dbf3866ae721f039eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3209df466110d214b2ab6593f931a59c2127db8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8a93da38fd1572d864c1becbcc772ba91ee4403
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
202d83762fca70b7403c144e1fedddc6cd4930a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a163a5dc09ec091fed86421118ec56c90384997a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2faf1c074bf6e2f4f76acd11b9ad5a0b4caec40
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9173353f25559ed524c7a40c799056c01c3418d4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
03d99a16095b73a73770fbb6131d10234cfc13fd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bcb978ccc354d99d843725886083e321759b6765
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b20d016c829af1c0ffbaa0545c1deb96ccd5e2e5
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "8.8.15"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p7\\.1"
        }
    ]
}

Affected versions

10.*
10.0.0-GA
10.0.1
8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.12
8.8.15
8.8.15.U20
8.8.15.p11
8.8.15.p26
8.8.15.p3
8.8.15.p30
8.8.15.p31
8.8.15.p32
8.8.15.p33
8.8.15.p34
8.8.15.p35
8.8.15.p40
8.8.15.p5
8.8.2
8.8.3
8.8.4
8.8.6
8.8.7
8.8.8
8.8.9
8.8.9.p1
8.8.9.p3
9.*
9.0.0
9.0.0.U20
9.0.0.p0
9.0.0.p19
9.0.0.p23
9.0.0.p25
9.0.0.p26
9.0.0.p27
9.0.0.p28
9.0.0.p33
9.0.0.p4
9.0.0.p7
9.0.0.p7.1

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p13"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p14"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p15"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p16"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p17"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p18"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p21"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p22"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p23"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p24"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p25"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p27"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p28"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p29"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p37"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p41"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p42"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p13"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p14"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p15"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p16"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p21"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p24"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p24\\.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p35"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p9"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43102.json"