CVE-2017-8802

Description

Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality.

References

https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-001_zimbra_stored_xss.txt

https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories

https://bugzilla.zimbra.com/show_bug.cgi?id=107925

http://www.securityfocus.com/archive/1/541661/100/0/threaded

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS