Exploit / PoCcritical
Hackers target Greece, Tunisia, Moldova, Vietnam and Pakistan with Zimbra zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-24682 | Cross-Site Scripting in Synacor Zimbra Collaboration Suite Calendar | 6.1 | 31% | KEVRansomwarePoC | KEV |
| CVE-2023-37580 | Stored Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (ZCS) | 6.1 | 49% | KEV | KEV |
From the original article
3 min read at therecord.media
Hackers exploited a vulnerability in Zimbra’s email product to attack government agencies in Greece, Tunisia, Moldova, Vietnam and Pakistan, Google researchers have discovered. Google’s Threat Analysis Group (TAG) first discovered the bug, classified as CVE-2023-37580, in June.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.