Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:15:52 +0000 certfr-2022-avi-736 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 certfr-2022-avi-736 https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 EUVD-2026-18729 https://cve.radiocsirt.org/vuln/euvd-2026-18729 EUVD-2026-18729 https://cve.radiocsirt.org/vuln/euvd-2026-18729 fkie_cve-2022-37043 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37043 <p>An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.</p> <p>An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37043 GHSA-p738-hfmq-65wm https://cve.radiocsirt.org/vuln/ghsa-p738-hfmq-65wm <p>An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.</p> <p>An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to be intended. The CSRF token is omitted from the request, but the request still succeeds.</p> https://cve.radiocsirt.org/vuln/ghsa-p738-hfmq-65wm gsd-2022-37043 https://cve.radiocsirt.org/vuln/gsd-2022-37043 gsd-2022-37043 https://cve.radiocsirt.org/vuln/gsd-2022-37043