SecurityBleepingComputerabout 1 hour ago
Zimbra patches critical XSS flaw in Classic Web Client
1 min read
Zimbra released version 10.1.19 to patch a critical stored cross-site scripting vulnerability in the Classic Web Client. Attackers can exploit the flaw through specially crafted emails that execute malicious code when opened, potentially stealing session data and mailbox information. Google's Threat Analysis Group reported the vulnerability.
Level
Hype check
Tap to vote and see what everyone thinks.
