---
id: 10122
title: "[CVE-2022-24682] Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra"
cve: CVE-2022-24682
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2022/02/03/operation-emailthief-active-exploitation-of-zero-day-xss-vulnerability-in-zimbra/"
published_at: "2022-02-03T15:45:51Z"
tags: ["zero-day", "vulnerability-research", "threat-intelligence", "xss", "apt", "exploit", "0day", "espionage", "zimbra", "spear-phishing"]
phying_url: "https://phying.com/item/10122"
lang: en
---

# [CVE-2022-24682] Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra

## Summary

[UPDATE] On February 4, 2022, Zimbra provided an update regarding this zero-day exploit vulnerability and reported that a hotfix for 8.8.15 P30 would be available on February 5, 2022. This vulnerability […]

## Intelligence Metadata

- **Sources:** volexity.com
- **CVE:** CVE-2022-24682
- **Published:** 2022-02-03T15:45:51Z
- **Original:** https://www.volexity.com/blog/2022/02/03/operation-emailthief-active-exploitation-of-zero-day-xss-vulnerability-in-zimbra/
- **Phying News:** https://phying.com/item/10122