CVE-2022-24682 · Sandworm Watch

Feb 25, 2022high

CVE-2022-24682: Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code. Required action: Apply updates per vendor instructions.

CVE-2022-24682EPSS 31.1%SynacorZimbra Collaborate Suite (ZCS)

CISA KEV ↗ · unattributed attribution