CVE-2023-50440

Name of the Vulnerable Software and Affected Versions ZED! for Windows versions before Q.2020.3 through Q.2021.2 ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5 ZEDMAIL for Windows version 2023.5 and earlier ZED! for Windows, Mac, Linux version 2023.5 and earlier ZEDFREE for Windows, Mac, Linux version 2023.5 and earlier ZEDPRO for Windows, Mac, Linux version 2023.5 and earlier

Description The issue allows an unauthenticated attacker to modify ZED containers to include a UNC reference, potentially triggering network access to an attacker-controlled computer when opened by the victim.

Recommendations For ZED! for Windows versions before Q.2020.3 through Q.2021.2, update to a version after Q.2021.2. For ZONECENTRAL for Windows versions before Q.2021.2 through 2023.5, update to a version after 2023.5. For ZEDMAIL for Windows version 2023.5 and earlier, update to a version after 2023.5. For ZED! for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5. For ZEDFREE for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5. For ZEDPRO for Windows, Mac, Linux version 2023.5 and earlier, update to a version after 2023.5.