Threats Tagged 'ghsa-q3fj-jg2r-pp4p'
View all threats tagged with 'ghsa-q3fj-jg2r-pp4p'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-q3fj-jg2r-pp4p'
Click on any threat for detailed analysis and mitigation recommendations
A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.20 allows a delegated administrator without explicit administrative grants to overwrite global Zimlet configuration. This can lead to adding an attacker-controlled domain to the proxy allowlist, enabling cross-origin JavaScript execution when a signed-in user accesses a crafted URL. The vulnerability requires a delegated-administrator account and victim interaction via a crafted URL, potentially exposing mailbox data and allowing authenticated actions as the victim. Join the discussion | GCVE Database | 10/23/2026, 15:31:39 UTC Added: 10/23/2026, 18:43:18 UTC |
Showing 1 to 1 of 1 result