Threat intelligence / Vulnerability
CVE-2024-27443
Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.
Vulnerability
TypeVulnerability
External ID—
First seen2025-05-19
Last seen2025-05-19
Confidence
—
Zimbra Collaboration contains a cross-site scripting (XSS) vulnerability in the CalendarInvite feature of the Zimbra webmail classic user interface. An attacker can exploit this vulnerability via an email message containing a crafted calendar header, leading to the execution of arbitrary JavaScript code.
Labels
CISA KEV context
Vendor / productSynacor Zimbra Collaboration Suite (ZCS)
Added2025-05-19
Due date2025-06-09
7 recorded
Relationships
2 external