coldbraid

CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

CVSS
not scored

CWE-79CWE-138

On CISA’s exploited list

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Added
2023-04-03
Federal patch deadline
2023-04-24
Ransomware use
not known