{"id":"CVE-2018-10948","details":"Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.","modified":"2026-09-14T03:45:14.351016384Z","published":"2019-05-30T18:29:02.550Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:synacor:zimbra_collaboration_suite:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.7.1"},{"last_affected":"8.7.1"},{"last_affected":"8.7.1"},{"last_affected":"8.7.1"}],"source":"CPE_RANGE","vendor_product":"synacor:zimbra_collaboration_suite"}]},"references":[{"type":"REPORT","url":"https://bugzilla.zimbra.com/show_bug.cgi?id=107948"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-build","events":[{"introduced":"7e67bbd1e09e5245a71b7936fa31f0106ee3b354"},{"last_affected":"7e67bbd1e09e5245a71b7936fa31f0106ee3b354"}],"database_specific":{"extracted_events":[{"introduced":"8.8.0-beta1"},{"last_affected":"8.8.0-beta1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*"}}],"versions":["8.8.0-beta1","8.8.0.beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-mailbox","events":[{"introduced":"cbc8fb6c44e917d86f27f5585940e76ddb1be2fd"},{"last_affected":"cbc8fb6c44e917d86f27f5585940e76ddb1be2fd"}],"database_specific":{"cpe":"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*","extracted_events":[{"introduced":"8.8.0-beta1"},{"last_affected":"8.8.0-beta1"}],"source":"CPE_STRING"}}],"versions":["8.8.0-beta1","8.8.0.beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs","events":[{"introduced":"54b83393aafc91e0f9f7b30adb3add695facb601"},{"last_affected":"54b83393aafc91e0f9f7b30adb3add695facb601"}],"database_specific":{"cpe":"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*","extracted_events":[{"introduced":"8.8.0-beta1"},{"last_affected":"8.8.0-beta1"}],"source":"CPE_STRING"}}],"versions":["8.8.0-beta1","8.8.0.beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-zcs-lib","events":[{"introduced":"68e907ff3d4d17c5b93455349671584eab4725fd"},{"last_affected":"68e907ff3d4d17c5b93455349671584eab4725fd"}],"database_specific":{"cpe":"cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0:beta1:*:*:*:*:*:*","extracted_events":[{"introduced":"8.8.0-beta1"},{"last_affected":"8.8.0-beta1"}],"source":"CPE_STRING"}}],"versions":["8.8.0-beta1","8.8.0.beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10948.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"}]}