CVE-2023-37580

Vulnerability updated 6 days ago (2024-10-02T02:01:09.113Z)
Download STIX
Preview STIX
CVE-2023-37580 is a significant vulnerability discovered in the Zimbra Collaboration Suite, identified as a zero-day cross-site scripting (XSS) flaw. This vulnerability was exploited by threat actors to steal email data, user credentials, and authentication tokens from various government organizations. Google's Threat Analysis Group (TAG) first revealed this exploitation on November 16, 2023. Four different hacker groups were observed exploiting this vulnerability, some of which are believed to be advanced persistent threat actors based in China. The specific bug, CVE-2023-37580, is a reflected XSS vulnerability within the Zimbra email server. The issue was patched on July 25th, with a hotfix made available on its public GitHub repository on July 5th. Despite these remedial actions, the vulnerability continued to be exploited, particularly targeting international government organizations. The stolen information included not only email data but also valuable user credentials and authentication tokens, making this a high-risk security concern. In response to this threat, Check Point has provided protection against this vulnerability through its IPS blade. This security measure aims to safeguard systems from further exploitation by this XSS flaw in the Zimbra Collaboration Suite. Despite the patch and hotfix release, organizations are urged to update their systems promptly and monitor for any suspicious activity due to the severity of the potential data breach.
Description last updated: 2024-10-02T01:15:36.879Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Zimbra
Zero Day
Vulnerability
Exploit
Google
Government
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2023-37580 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
DARKReading
6 days ago
Checkpoint
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
Securityaffairs
a year ago
BankInfoSecurity
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
DARKReading
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CISA
a year ago