10
Multiple vulnerabilities were identified in Zimbra. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, spoofing, security restriction bypass and sensitive information disclosure on the targeted system.
Impact
- Security Restriction Bypass
- Spoofing
- Information Disclosure
- Cross-Site Scripting
System / Technologies affected
- Zimbra Daffodil prior to 10.0.18
- Zimbra Daffodil prior to 10.1.13
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.13#Security_Fixes
- https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.18#Security_Fixes