CVE-2024-45517: XSS
Published Nov 21, 2024
·Updated
An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability in the /h/rest endpoint of the Zimbra webmail and admin panel interfaces allows attackers to execute arbitrary JavaScript in the victim's session. This issue is caused by improper sanitization of user input, leading to potential compromise of sensitive information. Exploitation requires user interaction to access the malicious URL.
Affected Software
93 affected components
Zimbra Collaboration (ZCS)<=10.1
Synacor Zimbra Collaboration Suite<8.8.15
Synacor Zimbra Collaboration Suite>=10.0.0<10.0.9
Synacor Zimbra Collaboration Suite=8.8.15
Synacor Zimbra Collaboration Suite=8.8.15-p1
Synacor Zimbra Collaboration Suite=8.8.15-p10
Synacor Zimbra Collaboration Suite=8.8.15-p11
Synacor Zimbra Collaboration Suite=8.8.15-p12
Synacor Zimbra Collaboration Suite=8.8.15-p13
Synacor Zimbra Collaboration Suite=8.8.15-p14
Synacor Zimbra Collaboration Suite=8.8.15-p15
Synacor Zimbra Collaboration Suite=8.8.15-p16
Synacor Zimbra Collaboration Suite=8.8.15-p17
Synacor Zimbra Collaboration Suite=8.8.15-p18
Synacor Zimbra Collaboration Suite=8.8.15-p19
Synacor Zimbra Collaboration Suite=8.8.15-p2
Synacor Zimbra Collaboration Suite=8.8.15-p20
Synacor Zimbra Collaboration Suite=8.8.15-p21
Synacor Zimbra Collaboration Suite=8.8.15-p22
Synacor Zimbra Collaboration Suite=8.8.15-p23
Synacor Zimbra Collaboration Suite=8.8.15-p24
Synacor Zimbra Collaboration Suite=8.8.15-p25
Synacor Zimbra Collaboration Suite=8.8.15-p26
Synacor Zimbra Collaboration Suite=8.8.15-p27
Synacor Zimbra Collaboration Suite=8.8.15-p28
Synacor Zimbra Collaboration Suite=8.8.15-p29
Synacor Zimbra Collaboration Suite=8.8.15-p3
Synacor Zimbra Collaboration Suite=8.8.15-p30
Synacor Zimbra Collaboration Suite=8.8.15-p31
Synacor Zimbra Collaboration Suite=8.8.15-p31.1
Synacor Zimbra Collaboration Suite=8.8.15-p32
Synacor Zimbra Collaboration Suite=8.8.15-p33
Synacor Zimbra Collaboration Suite=8.8.15-p34
Synacor Zimbra Collaboration Suite=8.8.15-p35
Synacor Zimbra Collaboration Suite=8.8.15-p36
Synacor Zimbra Collaboration Suite=8.8.15-p37
Synacor Zimbra Collaboration Suite=8.8.15-p38
Synacor Zimbra Collaboration Suite=8.8.15-p39
Synacor Zimbra Collaboration Suite=8.8.15-p4
Synacor Zimbra Collaboration Suite=8.8.15-p40
Synacor Zimbra Collaboration Suite=8.8.15-p41
Synacor Zimbra Collaboration Suite=8.8.15-p42
Synacor Zimbra Collaboration Suite=8.8.15-p43
Synacor Zimbra Collaboration Suite=8.8.15-p44
Synacor Zimbra Collaboration Suite=8.8.15-p45
Synacor Zimbra Collaboration Suite=8.8.15-p5
Synacor Zimbra Collaboration Suite=8.8.15-p6
Synacor Zimbra Collaboration Suite=8.8.15-p7
Synacor Zimbra Collaboration Suite=8.8.15-p8
Synacor Zimbra Collaboration Suite=8.8.15-p9
Synacor Zimbra Collaboration Suite=9.0.0
Synacor Zimbra Collaboration Suite=9.0.0-p1
Synacor Zimbra Collaboration Suite=9.0.0-p10
Synacor Zimbra Collaboration Suite=9.0.0-p11
Synacor Zimbra Collaboration Suite=9.0.0-p12
Synacor Zimbra Collaboration Suite=9.0.0-p13
Synacor Zimbra Collaboration Suite=9.0.0-p14
Synacor Zimbra Collaboration Suite=9.0.0-p15
Synacor Zimbra Collaboration Suite=9.0.0-p16
Synacor Zimbra Collaboration Suite=9.0.0-p17
Synacor Zimbra Collaboration Suite=9.0.0-p18
Synacor Zimbra Collaboration Suite=9.0.0-p19
Synacor Zimbra Collaboration Suite=9.0.0-p2
Synacor Zimbra Collaboration Suite=9.0.0-p20
Synacor Zimbra Collaboration Suite=9.0.0-p21
Synacor Zimbra Collaboration Suite=9.0.0-p22
Synacor Zimbra Collaboration Suite=9.0.0-p23
Synacor Zimbra Collaboration Suite=9.0.0-p24
Synacor Zimbra Collaboration Suite=9.0.0-p24.1
Synacor Zimbra Collaboration Suite=9.0.0-p25
Synacor Zimbra Collaboration Suite=9.0.0-p26
Synacor Zimbra Collaboration Suite=9.0.0-p27
Synacor Zimbra Collaboration Suite=9.0.0-p28
Synacor Zimbra Collaboration Suite=9.0.0-p29
Synacor Zimbra Collaboration Suite=9.0.0-p3
Synacor Zimbra Collaboration Suite=9.0.0-p30
Synacor Zimbra Collaboration Suite=9.0.0-p31
Synacor Zimbra Collaboration Suite=9.0.0-p32
Synacor Zimbra Collaboration Suite=9.0.0-p33
Synacor Zimbra Collaboration Suite=9.0.0-p34
Synacor Zimbra Collaboration Suite=9.0.0-p35
Synacor Zimbra Collaboration Suite=9.0.0-p36
Synacor Zimbra Collaboration Suite=9.0.0-p37
Synacor Zimbra Collaboration Suite=9.0.0-p38
Synacor Zimbra Collaboration Suite=9.0.0-p39
Synacor Zimbra Collaboration Suite=9.0.0-p4
Synacor Zimbra Collaboration Suite=9.0.0-p40
Synacor Zimbra Collaboration Suite=9.0.0-p5
Synacor Zimbra Collaboration Suite=9.0.0-p6
Synacor Zimbra Collaboration Suite=9.0.0-p7
Synacor Zimbra Collaboration Suite=9.0.0-p8
Synacor Zimbra Collaboration Suite=9.0.0-p9
Synacor Zimbra Collaboration Suite=10.1.1
Event History
Nov 21, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45517?
CVE-2024-45517 has been classified as a high-severity vulnerability due to its potential to execute arbitrary JavaScript in victim sessions.
2
How do I fix CVE-2024-45517?
To mitigate CVE-2024-45517, update Zimbra Collaboration to the latest version beyond 10.1 where the issue is resolved.
3
What are the main impacts of CVE-2024-45517?
CVE-2024-45517 allows attackers to perform Cross-Site Scripting (XSS) attacks, compromising user sessions and potentially leading to data theft.
4
How can I identify if my system is vulnerable to CVE-2024-45517?
Check if you are using Zimbra Collaboration version 10.1 or earlier, which is affected by CVE-2024-45517.
5
Is CVE-2024-45517 specific to certain Zimbra interfaces?
Yes, CVE-2024-45517 specifically affects the /h/rest endpoint of the Zimbra webmail and admin panel interfaces.