An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webmail, an attacker can inject JavaScript or HTML code that leads to cross-site scripting (XSS). (Adding an adequate message to avoid malicious code will mitigate this issue.)
{
"versions": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-NA"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p1"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p11"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p20"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p26"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p3"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p30"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p31"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p32"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p33"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p34"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p35"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p40"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p43"
},
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p5"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p0"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p33"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p36"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p7\\.1"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p18"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p19"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p22"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p23"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p27"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p29"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p37"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p38"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p39"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p41"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p42"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-p9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p24\\.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p30"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p31"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p32"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p34"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0.0-p9"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45206.json"