Firetruck

CVE-2022-27926

KEV

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

View CVE record →
Vendor / Project
Synacor
Product
Zimbra Collaboration Suite (ZCS)
Date added
Apr 3, 2023
Due date
Apr 24, 2023
Known ransomware use
Unknown
CWEs
CWE-79, CWE-138

Description

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.

Required action

Apply updates per vendor instructions.

Notes