CVEvulnerability

CVE-2023-38750

7.5 HIGH Published 2023-07-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.

Affected configurations

• zimbra zimbra (>= 8.8.0 < 8.8.15) • zimbra zimbra 8.8.15 • zimbra zimbra 9.0.0 • zimbra zimbra 10.0.1

References