CVE-2023-50808: XSS
Published Feb 13, 2024
·Updated
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI.
Affected Software
38 affected components
Zimbra Collaboration<9.0.0
Zimbra Collaboration=9.0.0
Zimbra Collaboration=9.0.0-p0
Zimbra Collaboration=9.0.0-p1
Zimbra Collaboration=9.0.0-p10
Zimbra Collaboration=9.0.0-p11
Zimbra Collaboration=9.0.0-p12
Zimbra Collaboration=9.0.0-p13
Zimbra Collaboration=9.0.0-p14
Zimbra Collaboration=9.0.0-p15
Zimbra Collaboration=9.0.0-p16
Zimbra Collaboration=9.0.0-p19
Zimbra Collaboration=9.0.0-p2
Zimbra Collaboration=9.0.0-p20
Zimbra Collaboration=9.0.0-p21
Zimbra Collaboration=9.0.0-p23
Zimbra Collaboration=9.0.0-p24
Zimbra Collaboration=9.0.0-p24.1
Zimbra Collaboration=9.0.0-p25
Zimbra Collaboration=9.0.0-p26
Zimbra Collaboration=9.0.0-p27
Zimbra Collaboration=9.0.0-p3
Zimbra Collaboration=9.0.0-p30
Zimbra Collaboration=9.0.0-p31
Zimbra Collaboration=9.0.0-p32
Zimbra Collaboration=9.0.0-p33
Zimbra Collaboration=9.0.0-p34
Zimbra Collaboration=9.0.0-p35
Zimbra Collaboration=9.0.0-p36
Zimbra Collaboration=9.0.0-p37
Zimbra Collaboration=9.0.0-p38
Zimbra Collaboration=9.0.0-p4
Zimbra Collaboration=9.0.0-p5
Zimbra Collaboration=9.0.0-p6
Zimbra Collaboration=9.0.0-p7
Zimbra Collaboration=9.0.0-p7.1
Zimbra Collaboration=9.0.0-p8
Zimbra Collaboration=9.0.0-p9
Event History
Feb 13, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-50808?
CVE-2023-50808 has a medium severity rating due to its potential for DOM-based JavaScript injection.
2
How do I fix CVE-2023-50808?
To fix CVE-2023-50808, upgrade Zimbra Collaboration to version 9.0.0 Patch 38 GA or a higher version.
3
What software versions are affected by CVE-2023-50808?
CVE-2023-50808 affects all Zimbra Collaboration versions prior to 9.0.0 Patch 38 GA.
4
What type of vulnerability is CVE-2023-50808?
CVE-2023-50808 is a DOM-based JavaScript injection vulnerability, which allows malicious scripts to execute in a user's browser.
5
Can CVE-2023-50808 be exploited remotely?
Yes, CVE-2023-50808 can potentially be exploited remotely due to its nature as a web application vulnerability.