CVE-2024-45517

Summary

CVE-2024-45517 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting Zimbra Collaboration versions up to 10.1. The flaw lies in the /h/rest endpoint of Zimbra's webmail and admin panel interfaces, which fails to adequately sanitize user input. Consequentially, attackers can inject arbitrary JavaScript into victim's sessions. Successful exploitation necessitates user interaction, potentially leading to the compromise of sensitive information. This issue can pose a significant security risk, necessitating prompt patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.