buxu/bug

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-18984 ↗	Dec 15, 2021Wednesday, 15 December 2021, 23:15	6.1 MEDIUM	4.3 MEDIUM
A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection.
CVE-2020-18985 ↗	Dec 15, 2021Wednesday, 15 December 2021, 23:15	6.1 MEDIUM	5.8 MEDIUM
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.