漏洞描述
Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
mp.weixin.qq.comhttps://mp.weixin.qq.com/s/Vz8yL4xBlZN5EQQ_BG0OOA↗www.helpnetsecurity.comhttps://www.helpnetsecurity.com/2023/07/17/cve-2023-34192/↗cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-34192↗wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Security_Center↗wiki.zimbra.comhttps://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy↗