CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java.
CVE
CVE-2023-48432
Severity
MEDIUM
CVSS
6.1
EPSS
0.46%
Java
Original NVD Description
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can occur via JavaScript code in a link (for a webmail redirection endpoint) within en email message, e.g., if a victim clicks on that link within Zimbra webmail.
Related CVEs
Other vulnerabilities affecting the same vendor(s)