CVE-2024-50599

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50599
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50599.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-50599
Published
2024-11-07T00:00:00Z
Modified
2026-07-15T01:49:22.336934976Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Zimbra Collaboration Suite (ZCS) 8.8.15, affecting one of the webmail calendar endpoints. This arises from improper handling of user-supplied input, allowing an attacker to inject malicious code that is reflected back in the HTML response.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50599.json"
}
References

Affected packages

Git
github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
ac6081fa002b1511e926aba37740d2b6c20f3f43
Last affected
0e40da921adb967639011de45841cef4c4601413
Database specific 
{
    "extracted_events": [
        {
            "introduced": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "8.8.15-p1"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "introduced": "8.8.15-p11"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "8.8.15-p20"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "8.8.15-p26"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "8.8.15-p3"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "8.8.15-p30"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "8.8.15-p31"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "8.8.15-p33"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "8.8.15-p34"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "8.8.15-p35"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "introduced": "8.8.15-p40"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "8.8.15-p43"
        },
        {
            "last_affected": "8.8.15-p43"
        },
        {
            "introduced": "8.8.15-p44"
        },
        {
            "last_affected": "8.8.15-p44"
        },
        {
            "introduced": "8.8.15-p45"
        },
        {
            "last_affected": "8.8.15-p45"
        },
        {
            "introduced": "8.8.15-p5"
        },
        {
            "last_affected": "8.8.15-p5"
        }
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p43:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p44:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p45:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.8.15
8.8.15-NA
8.8.15-p1
8.8.15-p20
8.8.15-p26
8.8.15-p3
8.8.15-p30
8.8.15-p31
8.8.15-p32
8.8.15-p33
8.8.15-p34
8.8.15-p35
8.8.15-p40
8.8.15-p43
8.8.15-p44
8.8.15-p45
8.8.15-p5
8.8.15.p3
8.8.15.p5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50599.json"
github.com/zimbra/zm-mailbox

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-mailbox
Events
Introduced
d30e647f21ecef5490f21facf2e06e228b44a36e
Last affected
d31ba9d45eb31100ea30461dd859a5a9663b1e4a
Database specific 
{
    "extracted_events": [
        {
            "introduced": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "8.8.15-p1"
        },
        {
            "last_affected": "8.8.15-p1"
        },
        {
            "introduced": "8.8.15-p10"
        },
        {
            "last_affected": "8.8.15-p10"
        },
        {
            "introduced": "8.8.15-p11"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "8.8.15-p12"
        },
        {
            "last_affected": "8.8.15-p12"
        },
        {
            "introduced": "8.8.15-p13"
        },
        {
            "last_affected": "8.8.15-p13"
        },
        {
            "introduced": "8.8.15-p14"
        },
        {
            "last_affected": "8.8.15-p14"
        },
        {
            "introduced": "8.8.15-p15"
        },
        {
            "last_affected": "8.8.15-p15"
        },
        {
            "introduced": "8.8.15-p16"
        },
        {
            "last_affected": "8.8.15-p16"
        },
        {
            "introduced": "8.8.15-p17"
        },
        {
            "last_affected": "8.8.15-p17"
        },
        {
            "introduced": "8.8.15-p18"
        },
        {
            "last_affected": "8.8.15-p18"
        },
        {
            "introduced": "8.8.15-p2"
        },
        {
            "last_affected": "8.8.15-p2"
        },
        {
            "introduced": "8.8.15-p20"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "8.8.15-p23"
        },
        {
            "last_affected": "8.8.15-p23"
        },
        {
            "introduced": "8.8.15-p24"
        },
        {
            "last_affected": "8.8.15-p24"
        },
        {
            "introduced": "8.8.15-p25"
        },
        {
            "last_affected": "8.8.15-p25"
        },
        {
            "introduced": "8.8.15-p26"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "8.8.15-p27"
        },
        {
            "last_affected": "8.8.15-p27"
        },
        {
            "introduced": "8.8.15-p29"
        },
        {
            "last_affected": "8.8.15-p29"
        },
        {
            "introduced": "8.8.15-p3"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "8.8.15-p30"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "8.8.15-p31"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "8.8.15-p31\\.1"
        },
        {
            "last_affected": "8.8.15-p31\\.1"
        },
        {
            "introduced": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "8.8.15-p33"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "8.8.15-p34"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "8.8.15-p35"
        },
        {
            "last_affected": "8.8.15-p35"
        },
        {
            "introduced": "8.8.15-p36"
        },
        {
            "last_affected": "8.8.15-p36"
        },
        {
            "introduced": "8.8.15-p37"
        },
        {
            "last_affected": "8.8.15-p37"
        },
        {
            "introduced": "8.8.15-p39"
        },
        {
            "last_affected": "8.8.15-p39"
        },
        {
            "introduced": "8.8.15-p4"
        },
        {
            "last_affected": "8.8.15-p4"
        },
        {
            "introduced": "8.8.15-p40"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "8.8.15-p41"
        },
        {
            "last_affected": "8.8.15-p41"
        },
        {
            "introduced": "8.8.15-p45"
        },
        {
            "last_affected": "8.8.15-p45"
        },
        {
            "introduced": "8.8.15-p5"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "introduced": "8.8.15-p6"
        },
        {
            "last_affected": "8.8.15-p6"
        },
        {
            "introduced": "8.8.15-p7"
        },
        {
            "last_affected": "8.8.15-p7"
        },
        {
            "introduced": "8.8.15-p8"
        },
        {
            "last_affected": "8.8.15-p8"
        },
        {
            "introduced": "8.8.15-p9"
        },
        {
            "last_affected": "8.8.15-p9"
        }
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p10:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p11:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p12:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p13:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p14:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p15:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p16:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p17:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p18:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p2:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p25:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p26:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p27:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p29:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31.1:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p35:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p36:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p37:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p39:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p4:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p41:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p45:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p7:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p8:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p9:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.8.15
8.8.15-NA
8.8.15-p1
8.8.15-p10
8.8.15-p11
8.8.15-p12
8.8.15-p13
8.8.15-p14
8.8.15-p15
8.8.15-p16
8.8.15-p17
8.8.15-p18
8.8.15-p2
8.8.15-p20
8.8.15-p23
8.8.15-p24
8.8.15-p25
8.8.15-p26
8.8.15-p27
8.8.15-p29
8.8.15-p3
8.8.15-p30
8.8.15-p31
8.8.15-p31\.1
8.8.15-p32
8.8.15-p33
8.8.15-p34
8.8.15-p35
8.8.15-p36
8.8.15-p37
8.8.15-p39
8.8.15-p4
8.8.15-p40
8.8.15-p41
8.8.15-p45
8.8.15-p5
8.8.15-p6
8.8.15-p7
8.8.15-p8
8.8.15-p9
8.8.15.p1
8.8.15.p2
8.8.15.p3
8.8.15.p4
8.8.15.p5
8.8.15.p6
8.8.15.p7
8.8.15.p8
8.8.15.p9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50599.json"
github.com/zimbra/zm-zcs

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs
Events
Introduced
6c72db05e6f1b89c511ba5c08ec4b6399bec7bb6
Last affected
23aed22cd8a74171216c22f113baf1c7516065a5
Database specific 
{
    "extracted_events": [
        {
            "introduced": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "8.8.15-p33"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "8.8.15-p6"
        },
        {
            "last_affected": "8.8.15-p6"
        }
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p33:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p6:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.8.15
8.8.15-NA
8.8.15-p32
8.8.15-p33
8.8.15-p6
8.8.15.p6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50599.json"
github.com/zimbra/zm-zcs-lib

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-zcs-lib
Events
Introduced
41db44a222b547dcc89ab50273cb8684195c09c2
Last affected
0ab6066136702c847b75ff6928cf5e7af37adb6f
Database specific 
{
    "extracted_events": [
        {
            "introduced": "8.8.15-NA"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "8.8.15-p20"
        },
        {
            "last_affected": "8.8.15-p20"
        },
        {
            "introduced": "8.8.15-p21"
        },
        {
            "last_affected": "8.8.15-p21"
        },
        {
            "introduced": "8.8.15-p23"
        },
        {
            "last_affected": "8.8.15-p23"
        },
        {
            "introduced": "8.8.15-p24"
        },
        {
            "last_affected": "8.8.15-p24"
        },
        {
            "introduced": "8.8.15-p3"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "8.8.15-p30"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "8.8.15-p31"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "8.8.15-p32"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "8.8.15-p34"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "8.8.15-p40"
        },
        {
            "last_affected": "8.8.15-p40"
        },
        {
            "introduced": "8.8.15-p5"
        },
        {
            "last_affected": "8.8.15-p5"
        }
    ],
    "cpe": [
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:-:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p20:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p21:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p23:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p24:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p3:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p30:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p31:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p32:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p34:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p40:*:*:*:*:*:*",
        "cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15:p5:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.8.15
8.8.15-NA
8.8.15-p20
8.8.15-p21
8.8.15-p23
8.8.15-p24
8.8.15-p3
8.8.15-p30
8.8.15-p31
8.8.15-p32
8.8.15-p34
8.8.15-p40
8.8.15-p5
8.8.15.p3
8.8.15.p5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50599.json"