Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580)

Insights and Protections On November 16, 2023, a significant security concern was published by Google's Threat Analysis Group (TAG). They revealed an alarming vulnerability in Zimbra Collaboration, a widely-used email hosting tool for organizations. This vulnerability, designated with an identifier, CVE-2023-37580, is a glaring example of a reflected cross-site scripting (XSS) issue. It allows malicious [...]

The post Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580) appeared first on Wallarm.

The post Unpacking the Zimbra Cross-Site Scripting Vulnerability (CVE-2023-37580) appeared …

analysis api security collaboration cross-site cve cve-2023-37580 email google hosting insights issue november organizations scripting security tag threat threat analysis threat analysis group tool unpacking vulnerability xss zimbra