CVE-2019-7219

Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-11

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Webaccess (Zarafa)

References

• https://github.com/verifysecurity/CVE-2019-7219
• https://stash.kopano.io/repos?visibility=public