vulnerability
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
High
Summary
A critical cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client could allow attackers to execute malicious code through crafted emails, potentially leading to account compromise and data theft. Zimbra urges users to update to version 10.1.19 to mitigate the risk, following a history of XSS exploitation targeting the platform.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data