Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql) of Zimbra webmail due to a lack of CSRF token validation. This allows attackers to perform unauthorized GraphQL operations, such as modifying contacts, changing account settings, and accessing sensitive user data when an authenticated user visits a malicious website.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zimbra 安全漏洞
Vulnerability Description
Zimbra是Zimbra公司的一套开源的电子邮件协作平台。 Zimbra 9.0版本至10.1版本存在安全漏洞，该漏洞源于GraphQL端点缺少CSRF令牌验证，可能导致未经授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A