Exposure of Internal JSP and XML Files in Zimbra Collaboration (ZCS)

Exposure of Internal JSP and XML Files in Zimbra Collaboration (ZCS)

CVE-2023-38750 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.

Learn more about our Internal Network Penetration Testing.