CVE-2024-45514: XSS
Published Nov 21, 2024
·Updated
An issue was discovered in Zimbra Collaboration (ZCS) through v10.1. A Cross-Site Scripting (XSS) vulnerability exists in one of the endpoints of Zimbra Webmail due to insufficient sanitization of the packages parameter. Attackers can bypass the existing checks by using encoded characters, allowing the injection and execution of arbitrary JavaScript within a victim's session.
Affected Software
93 affected components
Synacor Zimbra Collaboration Suite<8.8.15
Synacor Zimbra Collaboration Suite>=10.0.0<10.0.9
Synacor Zimbra Collaboration Suite=8.8.15
Synacor Zimbra Collaboration Suite=8.8.15-p1
Synacor Zimbra Collaboration Suite=8.8.15-p10
Synacor Zimbra Collaboration Suite=8.8.15-p11
Synacor Zimbra Collaboration Suite=8.8.15-p12
Synacor Zimbra Collaboration Suite=8.8.15-p13
Synacor Zimbra Collaboration Suite=8.8.15-p14
Synacor Zimbra Collaboration Suite=8.8.15-p15
Synacor Zimbra Collaboration Suite=8.8.15-p16
Synacor Zimbra Collaboration Suite=8.8.15-p17
Synacor Zimbra Collaboration Suite=8.8.15-p18
Synacor Zimbra Collaboration Suite=8.8.15-p19
Synacor Zimbra Collaboration Suite=8.8.15-p2
Synacor Zimbra Collaboration Suite=8.8.15-p20
Synacor Zimbra Collaboration Suite=8.8.15-p21
Synacor Zimbra Collaboration Suite=8.8.15-p22
Synacor Zimbra Collaboration Suite=8.8.15-p23
Synacor Zimbra Collaboration Suite=8.8.15-p24
Synacor Zimbra Collaboration Suite=8.8.15-p25
Synacor Zimbra Collaboration Suite=8.8.15-p26
Synacor Zimbra Collaboration Suite=8.8.15-p27
Synacor Zimbra Collaboration Suite=8.8.15-p28
Synacor Zimbra Collaboration Suite=8.8.15-p29
Synacor Zimbra Collaboration Suite=8.8.15-p3
Synacor Zimbra Collaboration Suite=8.8.15-p30
Synacor Zimbra Collaboration Suite=8.8.15-p31
Synacor Zimbra Collaboration Suite=8.8.15-p31.1
Synacor Zimbra Collaboration Suite=8.8.15-p32
Synacor Zimbra Collaboration Suite=8.8.15-p33
Synacor Zimbra Collaboration Suite=8.8.15-p34
Synacor Zimbra Collaboration Suite=8.8.15-p35
Synacor Zimbra Collaboration Suite=8.8.15-p36
Synacor Zimbra Collaboration Suite=8.8.15-p37
Synacor Zimbra Collaboration Suite=8.8.15-p38
Synacor Zimbra Collaboration Suite=8.8.15-p39
Synacor Zimbra Collaboration Suite=8.8.15-p4
Synacor Zimbra Collaboration Suite=8.8.15-p40
Synacor Zimbra Collaboration Suite=8.8.15-p41
Synacor Zimbra Collaboration Suite=8.8.15-p42
Synacor Zimbra Collaboration Suite=8.8.15-p43
Synacor Zimbra Collaboration Suite=8.8.15-p44
Synacor Zimbra Collaboration Suite=8.8.15-p45
Synacor Zimbra Collaboration Suite=8.8.15-p5
Synacor Zimbra Collaboration Suite=8.8.15-p6
Synacor Zimbra Collaboration Suite=8.8.15-p7
Synacor Zimbra Collaboration Suite=8.8.15-p8
Synacor Zimbra Collaboration Suite=8.8.15-p9
Synacor Zimbra Collaboration Suite=9.0.0
Synacor Zimbra Collaboration Suite=9.0.0-p1
Synacor Zimbra Collaboration Suite=9.0.0-p10
Synacor Zimbra Collaboration Suite=9.0.0-p11
Synacor Zimbra Collaboration Suite=9.0.0-p12
Synacor Zimbra Collaboration Suite=9.0.0-p13
Synacor Zimbra Collaboration Suite=9.0.0-p14
Synacor Zimbra Collaboration Suite=9.0.0-p15
Synacor Zimbra Collaboration Suite=9.0.0-p16
Synacor Zimbra Collaboration Suite=9.0.0-p17
Synacor Zimbra Collaboration Suite=9.0.0-p18
Synacor Zimbra Collaboration Suite=9.0.0-p19
Synacor Zimbra Collaboration Suite=9.0.0-p2
Synacor Zimbra Collaboration Suite=9.0.0-p20
Synacor Zimbra Collaboration Suite=9.0.0-p21
Synacor Zimbra Collaboration Suite=9.0.0-p22
Synacor Zimbra Collaboration Suite=9.0.0-p23
Synacor Zimbra Collaboration Suite=9.0.0-p24
Synacor Zimbra Collaboration Suite=9.0.0-p24.1
Synacor Zimbra Collaboration Suite=9.0.0-p25
Synacor Zimbra Collaboration Suite=9.0.0-p26
Synacor Zimbra Collaboration Suite=9.0.0-p27
Synacor Zimbra Collaboration Suite=9.0.0-p28
Synacor Zimbra Collaboration Suite=9.0.0-p29
Synacor Zimbra Collaboration Suite=9.0.0-p3
Synacor Zimbra Collaboration Suite=9.0.0-p30
Synacor Zimbra Collaboration Suite=9.0.0-p31
Synacor Zimbra Collaboration Suite=9.0.0-p32
Synacor Zimbra Collaboration Suite=9.0.0-p33
Synacor Zimbra Collaboration Suite=9.0.0-p34
Synacor Zimbra Collaboration Suite=9.0.0-p35
Synacor Zimbra Collaboration Suite=9.0.0-p36
Synacor Zimbra Collaboration Suite=9.0.0-p37
Synacor Zimbra Collaboration Suite=9.0.0-p38
Synacor Zimbra Collaboration Suite=9.0.0-p39
Synacor Zimbra Collaboration Suite=9.0.0-p4
Synacor Zimbra Collaboration Suite=9.0.0-p40
Synacor Zimbra Collaboration Suite=9.0.0-p5
Synacor Zimbra Collaboration Suite=9.0.0-p6
Synacor Zimbra Collaboration Suite=9.0.0-p7
Synacor Zimbra Collaboration Suite=9.0.0-p8
Synacor Zimbra Collaboration Suite=9.0.0-p9
Synacor Zimbra Collaboration Suite=10.1.0
Zimbra Zimbra Collaboration (ZCS)<10.1
Event History
Nov 21, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45514?
CVE-2024-45514 is classified as a medium severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-45514?
To fix CVE-2024-45514, upgrade Zimbra Collaboration Suite to version 10.1.1 or later, which contains the necessary security patches.
3
What versions of Zimbra Collaboration Suite are affected by CVE-2024-45514?
CVE-2024-45514 affects Zimbra Collaboration Suite versions prior to 10.1.1, including versions from 8.8.15 to 10.0.9.
4
What impact does CVE-2024-45514 have on users?
CVE-2024-45514 can allow attackers to execute arbitrary JavaScript in the context of a victim's session, potentially compromising sensitive information.
5
Is there a workaround for CVE-2024-45514 if I cannot upgrade immediately?
There are no known workarounds for CVE-2024-45514, so it is recommended to implement an upgrade as soon as possible.