Description
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abuse Cascading Style Sheets (CSS) @import directives in email HTML.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Collaboration | Zimbra / Collaboration | >= 10.0, < 10.0.18 | affected |
| Collaboration | Zimbra / Collaboration | >= 10.1, < 10.1.13 | affected |