CVE-2022-41350: XSS
Published Oct 12, 2022
·Updated
In Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a phone parameter that is vulnerable to Reflected XSS. This allows executing arbitrary JavaScript on the victim's machine.
Affected Software
1 affected component
Zimbra Collaboration=8.8.15
Event History
Oct 12, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-41350?
The severity of CVE-2022-41350 is medium (6.1).
2
How does CVE-2022-41350 affect Zimbra Collaboration Suite (ZCS)?
CVE-2022-41350 affects Zimbra Collaboration Suite (ZCS) version 8.8.15.
3
What is the vulnerability in CVE-2022-41350?
The vulnerability in CVE-2022-41350 is a Reflected XSS vulnerability in /h/search?action=voicemail&action=listen.
4
What can an attacker do with CVE-2022-41350?
An attacker can execute arbitrary JavaScript on the victim's machine using CVE-2022-41350.
5
How can I mitigate CVE-2022-41350?
To mitigate CVE-2022-41350, it is recommended to update Zimbra Collaboration Suite (ZCS) to a version that is not affected by the vulnerability.