CVE-2023-43102

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-43102
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43102.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43102
Published
2023-12-07T00:00:00Z
Modified
2026-07-08T06:52:07.329407017Z
Summary
[none]
Details

An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43102.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "10.0.4"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
b68c7b31a1d94f94903a79c53f1bd316b792de1d
Fixed
66e1207b3891b9ca25de72da84fd67df0d3a1851
Introduced
ac6081fa002b1511e926aba37740d2b6c20f3f43
Database specific 
{
    "cpe": [
        "cpe:2.3:a:zimbra:collaboration:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p20:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p26:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p30:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p31:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p33:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p34:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p35:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p40:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p0:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p26:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p27:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p33:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p7:*:*:*:*:*:*",
        "cpe:2.3:a:zimbra:collaboration:9.0.0:p7.1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "8.8.15"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.4"
        },
        {
            "introduced": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "8.8.15-p1"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "introduced": "8.8.15-p11"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "8.8.15-p20"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "8.8.15-p26"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "8.8.15-p3"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "8.8.15-p30"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "8.8.15-p31"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "8.8.15-p33"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "8.8.15-p34"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "8.8.15-p35"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "introduced": "8.8.15-p40"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "8.8.15-p5"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "introduced": "9.0.0-NA"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "9.0.0-p0"
        },
        {
            "last_affected": "9.0.0-p0"
        },
        {
            "introduced": "9.0.0-p1"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "9.0.0-p19"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "9.0.0-p20"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "9.0.0-p23"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "9.0.0-p25"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "9.0.0-p26"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "9.0.0-p27"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "9.0.0-p33"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "9.0.0-p4"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "9.0.0-p7"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "9.0.0-p7\\.1"
        },
        {
            "last_affected": "9.0.0-p7\\.1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

10.*
10.0.0-GA
10.0.1
8.*
8.8.15-NA
8.8.15-p1
8.8.15-p20
8.8.15-p26
8.8.15-p3
8.8.15-p30
8.8.15-p31
8.8.15-p32
8.8.15-p33
8.8.15-p34
8.8.15-p35
8.8.15-p40
8.8.15-p5
9.*
9.0.0-NA
9.0.0-p0
9.0.0-p1
9.0.0-p20
9.0.0-p23
9.0.0-p25
9.0.0-p26
9.0.0-p27
9.0.0-p33
9.0.0-p4
9.0.0-p7
9.0.0-p7\.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43102.json"