Security Advisory

CVE-2018-6882

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-27 16:00:00

Last updated 2025-10-21 23:45:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.

← Browse all CVEs View on cve.org ↗