Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Zimbra/zm-mailbox

              develop @ 9121b24
            

Fixes

CVEs

HIGH

Peak severity

9.1%

Coverage

Highlights

Authorization Bypass: 10 prior fixes. Scrutinize any change in this area.

src/java/com/zimbra/cs/html/DefangFilter.java: most-fixed (3 issues). Treat as high-risk during review.

26 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Scripting: 3 historical fix(es) link src/java/com/zimbra/cs/html/DefangFilter.java to Cross-Site Scripting.

Arbitrary File Access: 1 historical fix(es) link src/java/com/zimbra/common/soap/W3cDomUtil.java to Arbitrary File Access.

Authentication Bypass: 1 historical fix(es) link src/java/com/zimbra/cs/mailbox/ACL.java to Authentication Bypass.