PT-2023-31548 · Unknown · Zedmail For Windows+4

Published

2023-12-13

·

Updated

2025-06-03

·

CVE-2023-50440

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ZED! for Windows versions before Q.2020.3 through Q.2021.2 ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5 ZEDMAIL for Windows version 2023.5 and earlier ZED! for Windows, Mac, Linux version 2023.5 and earlier ZEDFREE for Windows, Mac, Linux version 2023.5 and earlier ZEDPRO for Windows, Mac, Linux version 2023.5 and earlier
Description The issue allows an unauthenticated attacker to modify ZED containers to include a UNC reference, potentially triggering network access to an attacker-controlled computer when opened by the victim.
Recommendations For ZED! for Windows versions before Q.2020.3 through Q.2021.2, update to a version after Q.2021.2. For ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5, update to a version after 2023.5. For ZEDMAIL for Windows version 2023.5 and earlier, update to a version after 2023.5. For ZED! for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5. For ZEDFREE for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5. For ZEDPRO for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-50440

Affected Products

Zed! For Windows
Zedfree For Windows
Zedmail For Windows
Zedpro For Windows
Zonecentral For Windows