CVE-2023-38750: High severity zimbra vulnerability
Published Jul 31, 2023
·Updated
In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
Affected Software
29 affected components
Zimbra Zimbra>=8.8.0<8.8.15
Zimbra Zimbra=8.8.15-p11
Zimbra Zimbra=8.8.15-p26
Zimbra Zimbra=8.8.15-p3
Zimbra Zimbra=8.8.15-p30
Zimbra Zimbra=8.8.15-p31
Zimbra Zimbra=8.8.15-p32
Zimbra Zimbra=8.8.15-p33
Zimbra Zimbra=8.8.15-p34
Zimbra Zimbra=8.8.15-p35
Zimbra Zimbra=8.8.15-p37
Zimbra Zimbra=8.8.15-p38
Zimbra Zimbra=8.8.15-p40
Zimbra Zimbra=8.8.15-p5
Zimbra Zimbra=9.0.0
Zimbra Zimbra=9.0.0-p0
Zimbra Zimbra=9.0.0-p19
Zimbra Zimbra=9.0.0-p23
Zimbra Zimbra=9.0.0-p25
Zimbra Zimbra=9.0.0-p26
Zimbra Zimbra=9.0.0-p27
Zimbra Zimbra=9.0.0-p28
Zimbra Zimbra=9.0.0-p30
Zimbra Zimbra=9.0.0-p31
Zimbra Zimbra=9.0.0-p33
Zimbra Zimbra=9.0.0-p4
Zimbra Zimbra=9.0.0-p7
Zimbra Zimbra=9.0.0-p7.1
Zimbra Zimbra=10.0.1
Event History
Jul 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-38750?
CVE-2023-38750 has a severity rating of 7.5 (High).
2
How does CVE-2023-38750 affect Zimbra Collaboration?
CVE-2023-38750 allows internal JSP and XML files to be exposed in Zimbra Collaboration (ZCS) version 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2.
3
Which versions of Zimbra Collaboration are affected by CVE-2023-38750?
CVE-2023-38750 affects Zimbra Collaboration (ZCS) versions 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2.
4
Is there a fix for CVE-2023-38750?
Yes, the fix for CVE-2023-38750 is available in Zimbra Collaboration (ZCS) version 8.8.15 Patch 41, 9.0.0 Patch 34, and 10.0.2.