Insights and Protections On November 16, 2023, a significant security concern was published by Google's Threat Analysis Group (TAG). They revealed an alarming vulnerability in Zimbra Collaboration, a widely-used email hosting tool for organizations. This vulnerability, designated with an identifier, CVE-2023-37580, is a glaring example of a reflected cross-site scripting (XSS) issue. It allows malicious [...]

The post Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580) appeared first on Wallarm.

The post Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580) appeared first on Security Boulevard.

wlrmblog

Source: Security Boulevard
Source Link: https://securityboulevard.com/2023/11/unpacking-the-zimbra-cross-site-scripting-vulnerability-cve-2023-37580/