UpHeron
All vulnerabilities

Servers and applications

CVE-2023-24031

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmail /h/ endpoint, to execute arbitrary JavaScript code, leading to information disclosure.

Severity
Medium 6.1
Published
15 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Zimbra CollaborationServers and applications · cpe:a:zimbra:collaboration
  • Version 9.0.0-p27
  • Version 9.0.0-p26
  • Version 9.0.0-p25
  • Version 9.0.0-p23
All 23 release lines
  • Version 9.0.0
  • Version 9.0.0-p0
  • Version 9.0.0-p1
  • Version 9.0.0-p2
  • Version 9.0.0-p3
  • Version 9.0.0-p4
  • Version 9.0.0-p5
  • Version 9.0.0-p6
  • Version 9.0.0-p7
  • Version 9.0.0-p7.1
  • Version 9.0.0-p8
  • Version 9.0.0-p9
  • Version 9.0.0-p10
  • Version 9.0.0-p11
  • Version 9.0.0-p12
  • Version 9.0.0-p13
  • Version 9.0.0-p14
  • Version 9.0.0-p15
  • Version 9.0.0-p19
  • Version 9.0.0-p23
  • Version 9.0.0-p25
  • Version 9.0.0-p26
  • Version 9.0.0-p27

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-24031
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-24031