{"id":"CVE-2023-38750","details":"In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.","modified":"2026-08-12T03:51:15.164293791Z","published":"2023-07-31T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38750.json","unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"introduced":"8"},{"fixed":"8.8.15"},{"introduced":"9"},{"fixed":"9.0.0"},{"introduced":"10"},{"fixed":"10.0.2"}]}]},"references":[{"type":"WEB","url":"https://wiki.zimbra.com/wiki/Security_Center"},{"type":"WEB","url":"https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38750.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38750"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zimbra/zm-build","events":[{"introduced":"0"},{"fixed":"ac6081fa002b1511e926aba37740d2b6c20f3f43"},{"introduced":"29eea219faf34718f0ef1cda7c3f02c89910c96c"},{"last_affected":"0790bf1d8efac561cd8f567d5c9561db23178f51"}],"database_specific":{"extracted_events":[{"introduced":"8.8.0"},{"fixed":"8.8.15"},{"introduced":"8.8.15-p11"},{"last_affected":"8.8.15-p11"},{"introduced":"8.8.15-p26"},{"last_affected":"8.8.15-p26"},{"introduced":"8.8.15-p3"},{"last_affected":"8.8.15-p3"},{"introduced":"8.8.15-p30"},{"last_affected":"8.8.15-p30"},{"introduced":"8.8.15-p31"},{"last_affected":"8.8.15-p31"},{"introduced":"8.8.15-p32"},{"last_affected":"8.8.15-p32"},{"introduced":"8.8.15-p33"},{"last_affected":"8.8.15-p33"},{"introduced":"8.8.15-p34"},{"last_affected":"8.8.15-p34"},{"introduced":"8.8.15-p35"},{"last_affected":"8.8.15-p35"},{"introduced":"8.8.15-p40"},{"last_affected":"8.8.15-p40"},{"introduced":"8.8.15-p5"},{"last_affected":"8.8.15-p5"},{"introduced":"9.0.0"},{"last_affected":"9.0.0"},{"introduced":"9.0.0-p0"},{"last_affected":"9.0.0-p0"},{"introduced":"9.0.0-p19"},{"last_affected":"9.0.0-p19"},{"introduced":"9.0.0-p23"},{"last_affected":"9.0.0-p23"},{"introduced":"9.0.0-p25"},{"last_affected":"9.0.0-p25"},{"introduced":"9.0.0-p26"},{"last_affected":"9.0.0-p26"},{"introduced":"9.0.0-p27"},{"last_affected":"9.0.0-p27"},{"introduced":"9.0.0-p28"},{"last_affected":"9.0.0-p28"},{"introduced":"9.0.0-p33"},{"last_affected":"9.0.0-p33"},{"introduced":"9.0.0-p4"},{"last_affected":"9.0.0-p4"},{"introduced":"9.0.0-p7"},{"last_affected":"9.0.0-p7"},{"introduced":"9.0.0-p7\\.1"},{"last_affected":"9.0.0-p7\\.1"},{"introduced":"10.0.1"},{"last_affected":"10.0.1"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:zimbra:zimbra:*:*:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p11:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p26:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p3:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p30:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p31:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p32:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p33:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p34:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p35:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p40:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:8.8.15:p5:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:*:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p0:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p19:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p23:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p25:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p26:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p27:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p28:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p33:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p4:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p7:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:9.0.0:p7.1:*:*:*:*:*:*","cpe:2.3:a:zimbra:zimbra:10.0.1:*:*:*:*:*:*:*"]}}],"versions":["10.0.1","8.8.15-p11","8.8.15-p26","8.8.15-p3","8.8.15-p30","8.8.15-p31","8.8.15-p32","8.8.15-p33","8.8.15-p34","8.8.15-p35","8.8.15-p40","8.8.15-p5","9.0.0","9.0.0-p0","9.0.0-p19","9.0.0-p23","9.0.0-p25","9.0.0-p26","9.0.0-p27","9.0.0-p28","9.0.0-p33","9.0.0-p4","9.0.0-p7","9.0.0-p7\\.1","10.0.0-GA","10.0.0","8.8.12","8.8.10","8.8.9.p3","8.8.9.p1","8.8.9","8.8.8","8.7.11","8.8.7","8.8.6","8.8.4","8.8.3","8.8.2","8.8.0.beta1","8.7.10","8.7.9","8.7.7","8.7.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-38750.json"}}],"schema_version":"1.9.0"}