CVE-2020-18985

An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.
References
Link Resource
https://github.com/buxu/bug/issues/3 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*

History

20 Dec 2021, 13:46

Type Values Removed Values Added
References (MISC) https://github.com/buxu/bug/issues/3 - (MISC) https://github.com/buxu/bug/issues/3 - Issue Tracking, Third Party Advisory
CPE cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12:-:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.8
v3 : 6.1
CWE CWE-601

15 Dec 2021, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-12-15 23:15

Updated : 2024-02-04 22:08


NVD link : CVE-2020-18985

Mitre link : CVE-2020-18985

CVE.ORG link : CVE-2020-18985


JSON object : View

Products Affected

synacor

  • zimbra_collaboration_suite
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')