CVE-2024-45514

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-45514
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45514.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-45514
Published
2024-11-21T16:15:25.820Z
Modified
2026-04-10T05:17:49.098566Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS) vulnerability exists in one of the endpoints of Zimbra Webmail due to insufficient sanitization of the packages parameter. Attackers can bypass the existing checks by using encoded characters, allowing the injection and execution of arbitrary JavaScript within a victim's session.

References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
b68c7b31a1d94f94903a79c53f1bd316b792de1d
Fixed
2c67cbdfaebf6a71928749b7146f4852876b63ff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
62480d2f6aace77ee01bb4b8f46a3eff49cbdfd3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71b1626efff0a90ba64ff3e5ab192683e6dccc9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
905970576d6fe337150f09c0ad7a0f53aa1a8f42
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ae8f73501330bc788daed9c82c1222857d85b8b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe985a33cb83f82816a1e8f93d8d864112a6504e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7209ef3fd859fda5537cc7fbfdeb97cbd1ab931
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c2b2cd41fa3625cbd1c12f4e14e07eece395a31
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3dbd48fe84d22132463b3758e3a40be19267fc9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dbb831c2de39b20cda7ea1e0063645d3cb6d1770
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d471250d21cf4051227b7513e16df3a1f56ba86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f67d315f2985f71ebd97a53cc5b43b39cfdb8c91
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d66a4676f5dc69ca8f413989594d5103a89edf8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dee674129cc00d1829343a9bdcda37a9ca4ada8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e40da921adb967639011de45841cef4c4601413
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b6cd8f69d2761c014d4a3807f0bdee0011386444
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3209df466110d214b2ab6593f931a59c2127db8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8a93da38fd1572d864c1becbcc772ba91ee4403
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
202d83762fca70b7403c144e1fedddc6cd4930a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a163a5dc09ec091fed86421118ec56c90384997a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2faf1c074bf6e2f4f76acd11b9ad5a0b4caec40
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0bea2f7ec388cc09cb3de4ee93344df2695b91a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9173353f25559ed524c7a40c799056c01c3418d4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c27b145236b09c5487259d943dd54ffdea0ccbb3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d7f3750f42f0a59d61c1b44d8df1000a52ce9f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc50e7d47c56532b226a1c88c8011127e006940b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
03d99a16095b73a73770fbb6131d10234cfc13fd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bcb978ccc354d99d843725886083e321759b6765
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
52b539ef205db233bfd8116e8130e27735b4153c
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "8.8.15"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p43"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p44"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p45"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p38"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "10.1.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e9ebb1ed89f27827ea1963d1329b1f8335aba9ac
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a895cdd697874d0b3e8b8caf58aca8587370df3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
befb6e4bf13dd05d09ecc82054e8eb1ef68ddcf5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f2c89b7483feeb0e5230960ed59ecb8edb903507
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
91cb5232eaceb21fe2ef176ea6b7835ed78ae185
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a1bb7c8d0dafd59a551674e52c0b472d4cf275b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
60555cd490710748f161320029fcbdfc3379adfd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
abdcfc1e99045bfc2a7fd5d1aaa8e9769e478952
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8dd758add476db0ee9a7c1abab136e30ebde01b2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e067b8c20a2c01c947342c4f3c625b40b08b918f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ce56d132f0d6668a108f53199cf4c6bf5d6c505
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5b8551b2bfdfc49af4ef5c7ca75f9c5061635031
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e3813a02221fd56ec25139371411b2cd781e2c13
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1ce7ee805ce42b0ed8be10adbad7983dbf38c6f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e0c8862be83f591fc1b032045e98b96796061373
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
359e92ae32ffcbbdcd7787e4a8f1bafd8f1ae33c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
69e3baba70833e1941e04f7e988f663e533bc0aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
65680a883fa99aaeeffca1757668f7ffb7314183
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
efd11afe1b526bb03f59b699aaadf6a1449e0244
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9427799197093ee305e925fd73a18c63587b4c3e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d093cdf68ec6716be445c653277f602739a5086b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a12b964a206748de6db6dc1da2ee16249aabafce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58996926d8f031827e03ec788d69fd2d16739b1a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d31ba9d45eb31100ea30461dd859a5a9663b1e4a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
943f2188be659dbccc17e6082dc0c542f9debea4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
82e2bdc9c525585c3d3c2bb383ed80b1feaf878e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e641be6dd504882bd357015c8012195d5bb49da2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e641be6dd504882bd357015c8012195d5bb49da2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
52c811a0259419b4e3d177f80c0ba7562d375cfa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
459d2044a9a205efee2b8998be41762876174dde
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
497eef64675f6ae63972c50c24e26048640748f6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dbe58ce9fb59913993aa2d7a5f2c28a292ee4a86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63c14463c4393c0fcdec4a470e448d1d7dab76d1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
83f33002916b0d752667a29a7fcf865af4609e7a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
19ec057977b93892ef40c4d4d68b578bb8e4dea0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
848af7d9e2467b794b51a49afe3d1edef3ce6b66
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4576339cd43ab64c19dc87591825ab51cb79f07a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2d2629d018b23dba6b5e984860724832adbe7014
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bcce34b646ae27b931802d859d47e4adfe981635
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f11cd2739a33347b5035c138813fd117378ec5c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
69380ca2440983320d3262ef155852dbd5bac4f5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31856510b3e72583143b1464bae867772e303bab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a6fdb2b0bbe8c189fd212d798f71f183fd3318ba
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f323d75b09d42a6313b47d9a74aae96ec66aa1f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7d74bc7bfd7f78c7261d0e52baf42716630fc3f0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
10b7ff251aee6f4770ad75377a1f81491ad5bdb9
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p31\\.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p39"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p41"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p24\\.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p39"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p9"
        }
    ]
}
Type
GIT
Repo
https://github.com/zimbra/zm-zcs-lib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bd05dc4161a2046d2972fb744f98675fa0f5b4f0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p21"
        }
    ]
}

Affected versions

10.*
10.0.0-GA
10.0.1
10.0.4
10.0.5
10.0.6
10.1.0
8.*
8.7.10
8.7.11
8.7.6
8.7.7
8.7.9
8.8.0.beta1
8.8.10
8.8.12
8.8.15
8.8.15.U20
8.8.15.p1
8.8.15.p10
8.8.15.p11
8.8.15.p12
8.8.15.p13
8.8.15.p14
8.8.15.p15
8.8.15.p15.nysa
8.8.15.p16
8.8.15.p17
8.8.15.p18
8.8.15.p2
8.8.15.p20
8.8.15.p21
8.8.15.p23
8.8.15.p24
8.8.15.p25
8.8.15.p26
8.8.15.p27
8.8.15.p29
8.8.15.p3
8.8.15.p30
8.8.15.p31
8.8.15.p31.1
8.8.15.p32
8.8.15.p33
8.8.15.p34
8.8.15.p35
8.8.15.p36
8.8.15.p37
8.8.15.p39
8.8.15.p4
8.8.15.p40
8.8.15.p41
8.8.15.p43
8.8.15.p44
8.8.15.p45
8.8.15.p5
8.8.15.p6
8.8.15.p7
8.8.15.p8
8.8.15.p9
8.8.2
8.8.3
8.8.4
8.8.5
8.8.6
8.8.7
8.8.8
8.8.9
8.8.9.p1
8.8.9.p3
9.*
9.0.0
9.0.0.U20
9.0.0.p1
9.0.0.p10
9.0.0.p11
9.0.0.p13
9.0.0.p14
9.0.0.p16
9.0.0.p17
9.0.0.p18
9.0.0.p19
9.0.0.p2
9.0.0.p20
9.0.0.p22
9.0.0.p23
9.0.0.p24
9.0.0.p24.1
9.0.0.p25
9.0.0.p26
9.0.0.p27
9.0.0.p28
9.0.0.p29
9.0.0.p3
9.0.0.p30
9.0.0.p32
9.0.0.p33
9.0.0.p34
9.0.0.p36
9.0.0.p37
9.0.0.p38
9.0.0.p39
9.0.0.p4
9.0.0.p40
9.0.0.p5
9.0.0.p6
9.0.0.p7
9.0.0.p7.1
9.0.0.p8
9.0.0.p9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45514.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p22"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p28"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p38"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8.15-p42"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p15"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p21"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0.0-p35"
            }
        ]
    }
]