This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Stored XSS in Zimbra Classic Web Client. ๐ **Consequences**: Malicious JS executes when viewing emails with ICS files. ๐ฅ **Impact**: Unauthorized actions, data theft, session hijacking.
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **Root Cause**: Insufficient HTML sanitization in ICS files. ๐งฌ **Flaw**: The parser fails to strip dangerous tags/attributes. ๐ **CWE**: Not specified in data, but implies Input Validation failure.
Q3Who is affected? (Versions/Components)
๐ข **Affected**: Zimbra Collaboration Server (ZCS). ๐ฆ **Versions**: 9.0, 10.0, and 10.1. ๐ฅ๏ธ **Component**: Classic Web Client specifically.
๐ **Auth Required**: Yes, victim must view the malicious email. ๐ฉ **Vector**: Email delivery with malicious ICS attachment. ๐ฏ **Threshold**: Medium (Social engineering needed).
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **PoC Available**: Yes, via Nuclei templates. ๐ **Link**: projectdiscovery/nuclei-templates. ๐ซ **Wild Exploit**: Not confirmed, but detection is public.
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for ZCS versions 9.0-10.1. ๐ ๏ธ **Tool**: Use Nuclei template for CVE-2025-27915. ๐ง **Manual**: Check if Classic Client processes ICS HTML.
Q8Is it fixed officially? (Patch/Mitigation)
โ **Fixed**: Yes, official patches released. ๐ **Refs**: Zimbra Wiki Security Fixes (9.0.0/P44, 10.0.13, 10.1.5). ๐ **Action**: Update immediately.
Q9What if no patch? (Workaround)
๐ง **Workaround**: Disable Classic Web Client if possible. ๐ซ **Filter**: Block ICS file attachments via gateway. ๐๏ธ **Monitor**: Watch for unusual JS execution in client.
Q10Is it urgent? (Priority Suggestion)
โก **Priority**: HIGH. ๐ **Published**: 2025-03-12. ๐จ **Urgency**: Stored XSS is critical for enterprise email. ๐ **Action**: Patch NOW.