Zimbra - XSS (CVE-2022-27926)
Description
A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.
psychologyCrowdSec Analysis
CVE-2022-27926 is a reflected cross-site scripting (XSS) vulnerability affecting Zimbra Collaboration, specifically within the /public/launchNewWindow.jsp component. This flaw enables unauthenticated attackers to inject and execute arbitrary web scripts or HTML via crafted requests.
CrowdSec has been tracking this vulnerability and its exploits since 15th of December 2023.
Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2022-27926 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. In addition, according to the CrowdSec network, attack volume against CVE-2022-27926 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Attackers typically focus on requests to the /public/launchNewWindow.jsp endpoint when attempting to leverage this vulnerability.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2022-04-20 |
| CISA KEV | 2023-04-03 |
| CISA Remediation Deadline | 2023-04-24 |
| Rule Released | 2023-12-15 |
| CrowdSec First Seen | 2024-11-27 |