CVE-2020-18984
15.12.2021, 23:15
A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection.
| Vendor | Product | Version |
|---|---|---|
| synacor | zimbra_collaboration_suite | 8.8.12 |
𝑥
= Vulnerable software versions