ZeroDay Findings
Sign inSign up

Findings

CVE-2022-24682

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Published Feb 8, 2022 · updated Aug 6, 2026 · synacor zimbra collaboration suite

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 8, 2022 · Catalog

    Detected

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.

  2. Feb 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 11, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 6, 2026 · Catalog

    Updated

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.

Required action

Apply updates per vendor instructions.

CISA due date Mar 11, 2022

Affected

  • cpe synacor/zimbra collaboration suiteversion unspecified
  • cpe synacor/zimbra collaboration suite8.8.15
  • vendor Synacor Zimbra Collaborate Suite (ZCS)version unspecified

Sources

  • CISA KEVCVE-2022-24682

    Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

    cisa.gov
  • CVE.orgCVE-2022-24682

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-24682

    30-day exploitation probability 30.9%

    first.org
  • NIST NVDCVE-2022-24682

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes

    nvd.nist.gov

References