CVE-2020-18985

An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2021-12-15

Last modified

2024-08-04

Weaknesses

CWE-601

Affected products

• Zimbra Collaboration Suite (Synacor)

References

• https://github.com/buxu/bug/issues/3