From 3660280b591482b841d6e756618c1eba9e51a6ec Mon Sep 17 00:00:00 2001 From: CVE Team Date: Sat, 26 Jun 2021 13:00:47 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2019/9xxx/CVE-2019-9670.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/2019/9xxx/CVE-2019-9670.json b/2019/9xxx/CVE-2019-9670.json index a6ed0fa3c4f..ae7a6cb00f9 100644 --- a/2019/9xxx/CVE-2019-9670.json +++ b/2019/9xxx/CVE-2019-9670.json @@ -34,7 +34,7 @@ "description_data": [ { "lang": "eng", - "value": "mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability." + "value": "mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml." } ] }, @@ -76,6 +76,11 @@ "refsource": "EXPLOIT-DB", "name": "46693", "url": "https://www.exploit-db.com/exploits/46693/" + }, + { + "refsource": "MISC", + "name": "https://isc.sans.edu/forums/diary/CVE20199670+Zimbra+Collaboration+Suite+XXE+vulnerability/27570/", + "url": "https://isc.sans.edu/forums/diary/CVE20199670+Zimbra+Collaboration+Suite+XXE+vulnerability/27570/" } ] }