CVE-2022-27926 PoC — Zimbra 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27926.yaml

Associated Vulnerability

Title:Zimbra 安全漏洞 (CVE-2022-27926)
Description:Synacor Zimbra是美国Synacor公司的一套开源的电子邮件协作平台。 Zimbra Collaboration (aka ZCS) 9.0存在安全漏洞，该漏洞允许未经身份验证的攻击者通过请求参数执行任意 Web 脚本或 HTML。

Description

A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.

File Snapshot


 id: CVE-2022-27926

info:
  name: Zimbra Collaboration (ZCS) - Cross Site Scripting
  author: rootxh

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!