ZDI-24-1369: Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Zimbra. User interaction is required to exploit this vulnerability in that the target must open a malicious email message. The specific flaw exists within the implementation of the graphql endpoint. The issue results from the lack of proper protections against cross-site request forgery (CSRF) attacks. An attacker can leverage this vulnerability to disclose information in the context of the target email account.
Other sources
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Zimbra. User interaction is required to exploit this vulnerability in that the target must open a malicious email message. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2024-9665.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1369?
The severity of ZDI-24-1369 is classified as high due to the potential for sensitive information disclosure.
How can I fix the vulnerability ZDI-24-1369?
To fix ZDI-24-1369, ensure that your Zimbra installation is updated to the latest secure version provided by the vendor.
What type of attacks does ZDI-24-1369 allow?
ZDI-24-1369 allows remote attackers to exploit the vulnerability by sending malicious email messages that users must open.
Is user interaction required for ZDI-24-1369 exploitation?
Yes, user interaction is required for ZDI-24-1369 exploitation, as the user needs to open a malicious email.
What software versions are affected by ZDI-24-1369?
ZDI-24-1369 affects certain installations of Zimbra, with specific versions needing to be assessed for vulnerability.