GHSA-p88h-r6ph-r7j6MediumCVSS 6.5

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass...

Published
October 8, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

📋 Description

A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email content and headers to an arbitrary address.

🔗 References (3)