漏洞描述
A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-27926↗wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Security_Center↗wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24↗wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Security_Advisories↗github.comhttps://github.com/ARPSyndicate/cvemon↗