Exploit / PoCcriticalExploited in the wild

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

Help Net Securityby @helpnetsecurityJul 17, 2023 · 00:00 UTC (Jul 17, 2023)1 min read4 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-34192 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-34192 CVE-2022-24682 CVE-2022-41352 CVE-2022-27926

Tags: cve-2023-34192 cve-2022-24682 cve-2022-41352 cve-2022-27926 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24682	Cross-Site Scripting in Synacor Zimbra Collaboration Suite Calendar	6.1	31%	KEVRansomwarePoC	Feb 9, 2022 KEV Feb 25, 2022
CVE-2022-27926	Reflected XSS in Synacor Zimbra Collaboration Suite 9.0 (launchNewWindow.jsp)	6.1	18%	KEV	Apr 21, 2022 KEV Apr 3, 2023
CVE-2022-41352	Path Traversal Arbitrary File Upload in Synacor Zimbra Collaboration Suite	9.8	95%	KEVRansomwarePoC	Sep 26, 2022 KEV Oct 20, 2022
CVE-2023-34192	Authenticated XSS in Synacor Zimbra Collaboration Suite 8.8.15 Exploited in the Wild	9.0	77%	KEV	Jul 6, 2023 KEV Feb 25, 2025

From the original article

1 min read at helpnetsecurity.com

A critical cross site scripting (XSS) vulnerability (CVE-2023-34192) in popular open source email collaboration suite Zimbra is being exploited by attackers. CVE-2023-34192 could allow a remote authenticated threat actor to execute arbitrary code through a crafted script to the /h/autoSaveDraft function. It affects Zimbra Collaboration Suite (ZCS) v.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.