pentester.land· Apr 7, 2023· by Guillaume Jacques, Melvil Guillaume, Kévin Tellier🔍 CVE-2022-41348

Stored Cross-Site Scripting (XSS) in Zimbra version 8.8.15_GA_4059 CVE-2022-41348

Target Program: Zimbra

🎯 Vulnerability: Cross-Site Scripting (XSS)

💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.

#Stored XSS#CVE-2022-41348